@layerzerolabs/vm-tooling 0.2.63 → 0.2.65

package/dist/{7FZK5RET.cjs → 7FXZ63DE.cjs}

@@ -1,6 +1,6 @@
 'use strict';
 
-var _533SFXIE_cjs = require('./533SFXIE.cjs');
+var HSCHZUOV_cjs = require('./HSCHZUOV.cjs');
 var _5GPMTH2I_cjs = require('./5GPMTH2I.cjs');
 var _24WEKBY3_cjs = require('./24WEKBY3.cjs');
 var esToolkit = require('es-toolkit');
@@ -15,7 +15,10 @@ var TAG_SEPARATORS = [
 var generateGithubMatrix = /* @__PURE__ */ _24WEKBY3_cjs.__name((images, directory, versionCombinations) => {
   const createImageEntry = /* @__PURE__ */ _24WEKBY3_cjs.__name(([imageId, image]) => {
     const imageName = _5GPMTH2I_cjs.getImageName(image.name);
-    const tags = TAG_SEPARATORS.map((separator) => _533SFXIE_cjs.getImageTag(image, separator));
+    const tags = TAG_SEPARATORS.map((separator) => HSCHZUOV_cjs.getImageTag(image, separator));
+    if (tags.length === 0 || !tags[0]) {
+      throw new Error(`Image "${imageId}" produced no tags. Every image must have at least one non-empty tag.`);
+    }
     return {
       entry: {
         id: imageId,
@@ -53,5 +56,5 @@ var generateGithubMatrix = /* @__PURE__ */ _24WEKBY3_cjs.__name((images, directo
 }, "generateGithubMatrix");
 
 exports.generateGithubMatrix = generateGithubMatrix;
-//# sourceMappingURL=7FZK5RET.cjs.map
-//# sourceMappingURL=7FZK5RET.cjs.map
+//# sourceMappingURL=7FXZ63DE.cjs.map
+//# sourceMappingURL=7FXZ63DE.cjs.map

package/dist/7FXZ63DE.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/github/matrix.ts"],"names":["init_cjs_shims","TAG_SEPARATORS","generateGithubMatrix","__name","images","directory","versionCombinations","createImageEntry","imageId","image","imageName","getImageName","name","tags","map","separator","getImageTag","length","Error","entry","id","build_args","Object","entries","versions","dependencies","sort","key","value","constantCase","join","image_name","results","imageEntries","r","mirroredImages","filter","result","mirrorRegistries","flatMap","mirror","activeImages","activeImageIds","Set","combo","values","push"],"mappings":";;;;;;;;;AAAAA,4BAAA,EAAA;AA+BA,IAAMC,cAAAA,GAAiB;AAAC,EAAA,GAAA;AAAK,EAAA;;AAEtB,IAAMC,oBAAAA,mBAAuBC,oBAAA,CAAA,CAChCC,MAAAA,EACAC,SAAAA,EACAC,mBAAAA,KAAAA;AAEA,EAAA,MAAMC,gBAAAA,mBAAmBJ,oBAAA,CAAA,CAAC,CAACK,OAAAA,EAASC,KAAAA,CAAAA,KAAuB;AAIvD,IAAA,MAAMC,SAAAA,GAAYC,0BAAAA,CAAaF,KAAAA,CAAMG,IAAI,CAAA;AACzC,IAAA,MAAMC,IAAAA,GAAOZ,eAAea,GAAAA,CAAI,CAACC,cAAcC,wBAAAA,CAAYP,KAAAA,EAAOM,SAAAA,CAAAA,CAAAA;AAElE,IAAA,IAAIF,KAAKI,MAAAA,KAAW,CAAA,IAAK,CAACJ,IAAAA,CAAK,CAAA,CAAA,EAAI;AAC/B,MAAA,MAAM,IAAIK,KAAAA,CACN,CAAA,OAAA,EAAUV,OAAAA,CAAAA,qEAAAA,CAA8E,CAAA;AAEhG,IAAA;AAEA,IAAA,OAAO;MACHW,KAAAA,EAAO;QACHC,EAAAA,EAAIZ,OAAAA;AACJI,QAAAA,IAAAA,EAAMH,KAAAA,CAAMG,IAAAA;AACZS,QAAAA,UAAAA,EAAYC,OAAOC,OAAAA,CAAQ;AAAE,UAAA,GAAGd,KAAAA,CAAMe,QAAAA;AAAU,UAAA,GAAGf,KAAAA,CAAMgB;AAAa,SAAA,CAAA,CACjEC,IAAAA,EAAI,CACJZ,GAAAA,CAAI,CAAC,CAACa,GAAAA,EAAKC,KAAAA,CAAAA,KAAW,GAAGC,sBAAAA,CAAaF,GAAAA,CAAAA,CAAAA,SAAAA,EAAgBC,KAAAA,CAAAA,CAAO,CAAA;AAClEvB,QAAAA,SAAAA,EAAWyB,SAAAA,CAAKzB,SAAAA,EAAW,QAAA,EAAUI,KAAAA,CAAMG,IAAI,CAAA;QAC/CmB,UAAAA,EAAYrB,SAAAA;AACZG,QAAAA;AACJ,OAAA;AACAJ,MAAAA;AACJ,KAAA;EACJ,CAAA,EA1ByB,kBAAA,CAAA;AA4BzB,EAAA,MAAMuB,UAAUV,MAAAA,CAAOC,OAAAA,CAAQnB,MAAAA,CAAAA,CAAQU,IAAIP,gBAAAA,CAAAA;AAE3C,EAAA,MAAM0B,eAAeD,OAAAA,CAAQlB,GAAAA,CAAI,CAACoB,CAAAA,KAAMA,EAAEf,KAAK,CAAA;AAE/C,EAAA,MAAMgB,iBAAiBH,OAAAA,CAClBI,MAAAA,CAAO,CAACC,MAAAA,KAAWA,MAAAA,CAAO5B,MAAM6B,gBAAAA,EAAkBrB,MAAAA,CAAAA,CAClDsB,OAAAA,CAAQ,CAACF,MAAAA,KACNA,MAAAA,CAAO5B,MAAM6B,gBAAAA,CAAkBxB,GAAAA,CAAI,CAAC0B,MAAAA,MAAY;AAC5CpB,IAAAA,EAAAA,EAAIiB,OAAOlB,KAAAA,CAAMC,EAAAA;AACjBR,IAAAA,IAAAA,EAAMyB,OAAOlB,KAAAA,CAAMP,IAAAA;AACnBmB,IAAAA,UAAAA,EAAYM,OAAOlB,KAAAA,CAAMY,UAAAA;AACzBlB,IAAAA,IAAAA,EAAMwB,OAAOlB,KAAAA,CAAMN,IAAAA;AACnB2B,IAAAA;AACJ,GAAA,CAAA,CAAA,CAAA;AAGR,EAAA,MAAMC,eAAyB,EAAA;AAC/B,EAAA,IAAInC,mBAAAA,EAAqB;AACrB,IAAA,MAAMoC,cAAAA,GAAiB,IAAIC,GAAAA,CACvBrC,mBAAAA,CAAoBiC,OAAAA,CAAQ,CAACK,KAAAA,KAAUtB,MAAAA,CAAOuB,MAAAA,CAAOD,KAAAA,CAAMxC,MAAM,CAAA,CAAA,CAAA;AAErEqC,IAAAA,YAAAA,CAAaK,IAAAA,CAAI,GAAIJ,cAAAA,CAAAA;AACzB,EAAA;AAEA,EAAA,OAAO;IAAEtC,MAAAA,EAAQ6B,YAAAA;AAAcE,IAAAA,cAAAA;AAAgBM,IAAAA;AAAa,GAAA;AAChE,CAAA,EA1DoC,sBAAA","file":"7FXZ63DE.cjs","sourcesContent":["import { constantCase } from 'es-toolkit';\nimport { join } from 'node:path';\n\nimport { type Image, type VersionCombination } from '../config';\nimport { getImageTag } from '../utils/docker';\nimport { getImageName } from '../utils/finder';\n\ninterface ImageEntry {\n    id: string;\n    name: string;\n    build_args: string[];\n    image_name: string;\n    tags: string[];\n    directory: string;\n}\n\ninterface MirroredImageEntry {\n    id: string;\n    name: string;\n    image_name: string;\n    tags: string[];\n    mirror: string;\n}\n\ninterface GithubMatrixOutput {\n    images: ImageEntry[];\n    mirroredImages: MirroredImageEntry[];\n    activeImages: string[];\n}\n\n// TODO Remove underscore which is not standard in the Docker tag naming scheme.\nconst TAG_SEPARATORS = ['-', '_'] as const;\n\nexport const generateGithubMatrix = (\n    images: Record<string, Image>,\n    directory: string,\n    versionCombinations?: VersionCombination<string>[],\n): GithubMatrixOutput => {\n    const createImageEntry = ([imageId, image]: [string, Image]): {\n        entry: ImageEntry;\n        image: Image;\n    } => {\n        const imageName = getImageName(image.name);\n        const tags = TAG_SEPARATORS.map((separator) => getImageTag(image, separator));\n\n        if (tags.length === 0 || !tags[0]) {\n            throw new Error(\n                `Image \"${imageId}\" produced no tags. Every image must have at least one non-empty tag.`,\n            );\n        }\n\n        return {\n            entry: {\n                id: imageId,\n                name: image.name,\n                build_args: Object.entries({ ...image.versions, ...image.dependencies })\n                    .sort()\n                    .map(([key, value]) => `${constantCase(key)}_VERSION=${value}`),\n                directory: join(directory, 'docker', image.name),\n                image_name: imageName,\n                tags,\n            },\n            image,\n        };\n    };\n\n    const results = Object.entries(images).map(createImageEntry);\n\n    const imageEntries = results.map((r) => r.entry);\n\n    const mirroredImages = results\n        .filter((result) => result.image.mirrorRegistries?.length)\n        .flatMap((result) =>\n            result.image.mirrorRegistries!.map((mirror) => ({\n                id: result.entry.id,\n                name: result.entry.name,\n                image_name: result.entry.image_name,\n                tags: result.entry.tags,\n                mirror,\n            })),\n        );\n\n    const activeImages: string[] = [];\n    if (versionCombinations) {\n        const activeImageIds = new Set(\n            versionCombinations.flatMap((combo) => Object.values(combo.images)),\n        );\n        activeImages.push(...activeImageIds);\n    }\n\n    return { images: imageEntries, mirroredImages, activeImages };\n};\n"]}

package/dist/{2NTYK3VO.cjs → 7PWQZJWC.cjs}

@@ -74,5 +74,5 @@ exports.DockerRegistryMirror = DockerRegistryMirror;
 exports.getImageDirectory = getImageDirectory;
 exports.getRegistry = getRegistry;
 exports.volumeMappingSchema = volumeMappingSchema;
-//# sourceMappingURL=2NTYK3VO.cjs.map
-//# sourceMappingURL=2NTYK3VO.cjs.map
+//# sourceMappingURL=7PWQZJWC.cjs.map
+//# sourceMappingURL=7PWQZJWC.cjs.map

package/dist/{2NTYK3VO.cjs.map → 7PWQZJWC.cjs.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/config.ts"],"names":["init_cjs_shims","registryConfigCache","getRegistryConfig","__name","envRegistry","process","env","VM_TOOLING_REGISTRY","envImageDirectory","VM_TOOLING_IMAGE_DIRECTORY","registry","imageDirectory","workspaceRoot","getFullyQualifiedRepoRootPath","configPath","join","module","default","volumeMappingBaseSchema","object","containerPath","string","hostVolumeMappingSchema","extend","type","literal","hostPath","isolateVolumeMappingSchema","name","shared","optional","boolean","locked","volumeMappingSchema","union","DockerRegistryMirror","getImageDirectory","getRegistry"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAAA,4BAAA,EAAA;AAaA,IAAIC,mBAAAA;AAEJ,IAAMC,oCAAoBC,oBAAA,CAAA,YAAA;AACtB,EAAA,IAAI,CAACF,mBAAAA,EAAqB;AACtB,IAAA,MAAMG,WAAAA,GAAcC,QAAQC,GAAAA,CAAIC,mBAAAA;AAChC,IAAA,MAAMC,iBAAAA,GAAoBH,QAAQC,GAAAA,CAAIG,0BAAAA;AAEtC,IAAA,IAAIL,eAAeI,iBAAAA,EAAmB;AAClCP,MAAAA,mBAAAA,GAAsB;QAAES,QAAAA,EAAUN,WAAAA;QAAaO,cAAAA,EAAgBH;AAAkB,OAAA;IACrF,CAAA,MAAO;AACH,MAAA,MAAMI,aAAAA,GAAgB,MAAMC,6CAAAA,EAAAA;AAC5B,MAAA,MAAMC,aAAaC,SAAAA,CACfH,aAAAA,EACA,SAAA,EACA,YAAA,EACA,UACA,sBAAA,CAAA;AAGJ,MAAA,MAAMI,MAAAA,GAAS,MAAM,OAAOF,UAAAA,CAAAA;AAC5Bb,MAAAA,mBAAAA,GAAsBe,MAAAA,CAAOC,OAAAA;AACjC,IAAA;AACJ,EAAA;AACA,EAAA,OAAOhB,mBAAAA;AACX,CAAA,EAtB0B,mBAAA,CAAA;AAwB1B,IAAMiB,0BAA4BC,YAAAA,CAAAA,MAAAA,CAAO;AACrCC,EAAAA,aAAAA,EAAiBC,YAAAA,CAAAA,MAAAA;AACrB,CAAA,CAAA;AAEA,IAAMC,uBAAAA,GAA0BJ,wBAAwBK,MAAAA,CAAO;AAC3DC,EAAAA,IAAAA,EAAQC,qBAAQ,MAAA,CAAA;AAChBC,EAAAA,QAAAA,EAAYL,YAAAA,CAAAA,MAAAA;AAChB,CAAA,CAAA;AAEA,IAAMM,0BAAAA,GAA6BT,wBAAwBK,MAAAA,CAAO;AAC9DC,EAAAA,IAAAA,EAAQC,qBAAQ,SAAA,CAAA;AAChBG,EAAAA,IAAAA,EAAQP,YAAAA,CAAAA,MAAAA,EAAM;EACdQ,MAAAA,EAAUC,YAAAA,CAAAA,QAAAA,CAAWC,sBAAO,CAAA;EAC5BC,MAAAA,EAAUF,YAAAA,CAAAA,QAAAA,CAAWC,sBAAO;AAChC,CAAA,CAAA;AAEO,IAAME,sBAAwBC,YAAAA,CAAAA,KAAAA,CAAM;AAACZ,EAAAA,uBAAAA;AAAyBK,EAAAA;AAA2B,CAAA;AA6BzF,IAAKQ,oBAAAA,6BAAAA,qBAAAA,EAAAA;;AAAAA,EAAAA,OAAAA,qBAAAA;;AAmBL,IAAMC,iBAAAA,mBAAoBjC,oBAAA,CAAA,YAAA,CAAa,MAAMD,iBAAAA,IAAqBS,cAAAA,EAAxC,mBAAA;AAC1B,IAAM0B,WAAAA,mBAAclC,oBAAA,CAAA,YAAA,CAAa,MAAMD,iBAAAA,IAAqBQ,QAAAA,EAAxC,aAAA","file":"2NTYK3VO.cjs","sourcesContent":["import { join } from 'node:path';\nimport * as z from 'zod';\n\nimport { getFullyQualifiedRepoRootPath } from '@layerzerolabs/common-node-utils';\n\nimport type { ChainContext } from './context';\nimport type { ToolCommandExecutionOptions } from './core/tool-executor';\n\ninterface RegistryConfig {\n    registry: string;\n    imageDirectory: string;\n}\n\nlet registryConfigCache: RegistryConfig | undefined;\n\nconst getRegistryConfig = async (): Promise<RegistryConfig> => {\n    if (!registryConfigCache) {\n        const envRegistry = process.env.VM_TOOLING_REGISTRY;\n        const envImageDirectory = process.env.VM_TOOLING_IMAGE_DIRECTORY;\n\n        if (envRegistry && envImageDirectory) {\n            registryConfigCache = { registry: envRegistry, imageDirectory: envImageDirectory };\n        } else {\n            const workspaceRoot = await getFullyQualifiedRepoRootPath();\n            const configPath = join(\n                workspaceRoot,\n                'configs',\n                'vm-tooling',\n                'values',\n                'docker-image-repo.ts',\n            );\n\n            const module = await import(configPath);\n            registryConfigCache = module.default;\n        }\n    }\n    return registryConfigCache!;\n};\n\nconst volumeMappingBaseSchema = z.object({\n    containerPath: z.string(),\n});\n\nconst hostVolumeMappingSchema = volumeMappingBaseSchema.extend({\n    type: z.literal('host'),\n    hostPath: z.string(),\n});\n\nconst isolateVolumeMappingSchema = volumeMappingBaseSchema.extend({\n    type: z.literal('isolate'),\n    name: z.string(),\n    shared: z.optional(z.boolean()),\n    locked: z.optional(z.boolean()),\n});\n\nexport const volumeMappingSchema = z.union([hostVolumeMappingSchema, isolateVolumeMappingSchema]);\n\nexport type VolumeMapping = z.infer<typeof volumeMappingSchema>;\n\nexport interface EnvironmentVariable {\n    name: string;\n    value: string;\n}\n\nexport interface Tool {\n    name: string;\n    privileged?: boolean;\n\n    // Default isolate volumes for caching (user volumes can override these)\n    defaultVolumes?: readonly VolumeMapping[];\n\n    // Default environment variables (user env vars can override these)\n    defaultEnv?: readonly EnvironmentVariable[];\n\n    // Optional version parsing and validation functions\n    getSecondaryVersion?: (args: { cwd: string }) => Promise<string>;\n\n    // Optional hook called before every tool command execution (e.g., toolchain sync)\n    preExecute?: (\n        context: ChainContext<string>,\n        options: ToolCommandExecutionOptions,\n    ) => Promise<void>;\n}\n\nexport enum DockerRegistryMirror {\n    PUBLIC_GAR = 'public-gar',\n}\n\nexport interface Image {\n    name: string;\n    versions: Record<string, string>;\n    dependencies?: Record<string, string>;\n    patch?: number;\n    unreleased?: boolean;\n    mirrorRegistries?: DockerRegistryMirror[];\n}\n\nexport interface VersionCombination<TImageId> {\n    images: Record<string, TImageId>;\n    description?: string;\n    stable?: boolean;\n}\n\nexport const getImageDirectory = async () => (await getRegistryConfig()).imageDirectory;\nexport const getRegistry = async () => (await getRegistryConfig()).registry;\n"]}
+{"version":3,"sources":["../src/config.ts"],"names":["init_cjs_shims","registryConfigCache","getRegistryConfig","__name","envRegistry","process","env","VM_TOOLING_REGISTRY","envImageDirectory","VM_TOOLING_IMAGE_DIRECTORY","registry","imageDirectory","workspaceRoot","getFullyQualifiedRepoRootPath","configPath","join","module","default","volumeMappingBaseSchema","object","containerPath","string","hostVolumeMappingSchema","extend","type","literal","hostPath","isolateVolumeMappingSchema","name","shared","optional","boolean","locked","volumeMappingSchema","union","DockerRegistryMirror","getImageDirectory","getRegistry"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAAA,4BAAA,EAAA;AAaA,IAAIC,mBAAAA;AAEJ,IAAMC,oCAAoBC,oBAAA,CAAA,YAAA;AACtB,EAAA,IAAI,CAACF,mBAAAA,EAAqB;AACtB,IAAA,MAAMG,WAAAA,GAAcC,QAAQC,GAAAA,CAAIC,mBAAAA;AAChC,IAAA,MAAMC,iBAAAA,GAAoBH,QAAQC,GAAAA,CAAIG,0BAAAA;AAEtC,IAAA,IAAIL,eAAeI,iBAAAA,EAAmB;AAClCP,MAAAA,mBAAAA,GAAsB;QAAES,QAAAA,EAAUN,WAAAA;QAAaO,cAAAA,EAAgBH;AAAkB,OAAA;IACrF,CAAA,MAAO;AACH,MAAA,MAAMI,aAAAA,GAAgB,MAAMC,6CAAAA,EAAAA;AAC5B,MAAA,MAAMC,aAAaC,SAAAA,CACfH,aAAAA,EACA,SAAA,EACA,YAAA,EACA,UACA,sBAAA,CAAA;AAGJ,MAAA,MAAMI,MAAAA,GAAS,MAAM,OAAOF,UAAAA,CAAAA;AAC5Bb,MAAAA,mBAAAA,GAAsBe,MAAAA,CAAOC,OAAAA;AACjC,IAAA;AACJ,EAAA;AACA,EAAA,OAAOhB,mBAAAA;AACX,CAAA,EAtB0B,mBAAA,CAAA;AAwB1B,IAAMiB,0BAA4BC,YAAAA,CAAAA,MAAAA,CAAO;AACrCC,EAAAA,aAAAA,EAAiBC,YAAAA,CAAAA,MAAAA;AACrB,CAAA,CAAA;AAEA,IAAMC,uBAAAA,GAA0BJ,wBAAwBK,MAAAA,CAAO;AAC3DC,EAAAA,IAAAA,EAAQC,qBAAQ,MAAA,CAAA;AAChBC,EAAAA,QAAAA,EAAYL,YAAAA,CAAAA,MAAAA;AAChB,CAAA,CAAA;AAEA,IAAMM,0BAAAA,GAA6BT,wBAAwBK,MAAAA,CAAO;AAC9DC,EAAAA,IAAAA,EAAQC,qBAAQ,SAAA,CAAA;AAChBG,EAAAA,IAAAA,EAAQP,YAAAA,CAAAA,MAAAA,EAAM;EACdQ,MAAAA,EAAUC,YAAAA,CAAAA,QAAAA,CAAWC,sBAAO,CAAA;EAC5BC,MAAAA,EAAUF,YAAAA,CAAAA,QAAAA,CAAWC,sBAAO;AAChC,CAAA,CAAA;AAEO,IAAME,sBAAwBC,YAAAA,CAAAA,KAAAA,CAAM;AAACZ,EAAAA,uBAAAA;AAAyBK,EAAAA;AAA2B,CAAA;AA6BzF,IAAKQ,oBAAAA,6BAAAA,qBAAAA,EAAAA;;AAAAA,EAAAA,OAAAA,qBAAAA;;AAkBL,IAAMC,iBAAAA,mBAAoBjC,oBAAA,CAAA,YAAA,CAAa,MAAMD,iBAAAA,IAAqBS,cAAAA,EAAxC,mBAAA;AAC1B,IAAM0B,WAAAA,mBAAclC,oBAAA,CAAA,YAAA,CAAa,MAAMD,iBAAAA,IAAqBQ,QAAAA,EAAxC,aAAA","file":"7PWQZJWC.cjs","sourcesContent":["import { join } from 'node:path';\nimport * as z from 'zod';\n\nimport { getFullyQualifiedRepoRootPath } from '@layerzerolabs/common-node-utils';\n\nimport type { ChainContext } from './context';\nimport type { ToolCommandExecutionOptions } from './core/tool-executor';\n\ninterface RegistryConfig {\n    registry: string;\n    imageDirectory: string;\n}\n\nlet registryConfigCache: RegistryConfig | undefined;\n\nconst getRegistryConfig = async (): Promise<RegistryConfig> => {\n    if (!registryConfigCache) {\n        const envRegistry = process.env.VM_TOOLING_REGISTRY;\n        const envImageDirectory = process.env.VM_TOOLING_IMAGE_DIRECTORY;\n\n        if (envRegistry && envImageDirectory) {\n            registryConfigCache = { registry: envRegistry, imageDirectory: envImageDirectory };\n        } else {\n            const workspaceRoot = await getFullyQualifiedRepoRootPath();\n            const configPath = join(\n                workspaceRoot,\n                'configs',\n                'vm-tooling',\n                'values',\n                'docker-image-repo.ts',\n            );\n\n            const module = await import(configPath);\n            registryConfigCache = module.default;\n        }\n    }\n    return registryConfigCache!;\n};\n\nconst volumeMappingBaseSchema = z.object({\n    containerPath: z.string(),\n});\n\nconst hostVolumeMappingSchema = volumeMappingBaseSchema.extend({\n    type: z.literal('host'),\n    hostPath: z.string(),\n});\n\nconst isolateVolumeMappingSchema = volumeMappingBaseSchema.extend({\n    type: z.literal('isolate'),\n    name: z.string(),\n    shared: z.optional(z.boolean()),\n    locked: z.optional(z.boolean()),\n});\n\nexport const volumeMappingSchema = z.union([hostVolumeMappingSchema, isolateVolumeMappingSchema]);\n\nexport type VolumeMapping = z.infer<typeof volumeMappingSchema>;\n\nexport interface EnvironmentVariable {\n    name: string;\n    value: string;\n}\n\nexport interface Tool {\n    name: string;\n    privileged?: boolean;\n\n    // Default isolate volumes for caching (user volumes can override these)\n    defaultVolumes?: readonly VolumeMapping[];\n\n    // Default environment variables (user env vars can override these)\n    defaultEnv?: readonly EnvironmentVariable[];\n\n    // Optional version parsing and validation functions\n    getSecondaryVersion?: (args: { cwd: string }) => Promise<string>;\n\n    // Optional hook called before every tool command execution (e.g., toolchain sync)\n    preExecute?: (\n        context: ChainContext<string>,\n        options: ToolCommandExecutionOptions,\n    ) => Promise<void>;\n}\n\nexport enum DockerRegistryMirror {\n    PUBLIC_GAR = 'public-gar',\n}\n\nexport interface Image {\n    name: string;\n    versions: Record<string, string>;\n    dependencies?: Record<string, string>;\n    patch?: number;\n    mirrorRegistries?: DockerRegistryMirror[];\n}\n\nexport interface VersionCombination<TImageId> {\n    images: Record<string, TImageId>;\n    description?: string;\n    stable?: boolean;\n}\n\nexport const getImageDirectory = async () => (await getRegistryConfig()).imageDirectory;\nexport const getRegistry = async () => (await getRegistryConfig()).registry;\n"]}

package/dist/{NQIX4C7Z.cjs → BJD6YP5Q.cjs}

@@ -2,7 +2,7 @@
 
 var T3GK7LED_cjs = require('./T3GK7LED.cjs');
 var A5X4BLYY_cjs = require('./A5X4BLYY.cjs');
-var _533SFXIE_cjs = require('./533SFXIE.cjs');
+var HSCHZUOV_cjs = require('./HSCHZUOV.cjs');
 var _2Z4Y2ZR3_cjs = require('./2Z4Y2ZR3.cjs');
 var _5GPMTH2I_cjs = require('./5GPMTH2I.cjs');
 var XFDJEDQJ_cjs = require('./XFDJEDQJ.cjs');
@@ -130,7 +130,7 @@ async function executeToolCommand(context, toolName, args, { cwd, volumes: userV
       console.warn("Could not validate secondary version:", T3GK7LED_cjs.stringifyError(error));
     }
   }
-  const imageUri = await _533SFXIE_cjs.getImageUriForTool(context, tool.name, resolvedVersion);
+  const imageUri = await HSCHZUOV_cjs.getImageUriForTool(context, tool.name, resolvedVersion);
   const workspaceRoot = await _2Z4Y2ZR3_cjs.findWorkspaceRoot(cwd);
   const relativePath = path__default.default.relative(workspaceRoot, cwd);
   await ensureDockerImage(imageUri);
@@ -204,7 +204,7 @@ async function executeToolCommand(context, toolName, args, { cwd, volumes: userV
     ]),
     ...resolveVolumePaths(volumes, workspaceRoot).flatMap((volume) => [
       "-v",
-      _533SFXIE_cjs.getVolumeName(volume)
+      HSCHZUOV_cjs.getVolumeName(volume)
     ]),
     ...entrypoint ? [
       "--entrypoint",
@@ -232,5 +232,5 @@ ${stdout}` : ""}`);
 _24WEKBY3_cjs.__name(executeToolCommand, "executeToolCommand");
 
 exports.executeToolCommand = executeToolCommand;
-//# sourceMappingURL=NQIX4C7Z.cjs.map
-//# sourceMappingURL=NQIX4C7Z.cjs.map
+//# sourceMappingURL=BJD6YP5Q.cjs.map
+//# sourceMappingURL=BJD6YP5Q.cjs.map

package/dist/{NQIX4C7Z.cjs.map → BJD6YP5Q.cjs.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/core/tool-executor.ts"],"names":["init_cjs_shims","getHostUserIds","__name","userInfo","os","uid","gid","undefined","$","verbose","stdio","process","stderr","mergeVolumes","defaultVolumes","userVolumes","uniqBy","volume","containerPath","resolveVolumePaths","volumes","workspaceRoot","map","type","hostPath","path","resolve","replace","homedir","ensureDockerImage","imageUri","output","nothrow","quiet","exitCode","console","info","error","Error","stringifyError","isAuthError","includes","join","executeToolCommand","context","toolName","args","cwd","customEntrypoint","entrypoint","env","customEnvVars","script","publish","versions","tool","findToolByName","preExecute","length","name","overrides","filter","uv","some","dv","resolvedVersion","resolveTypeVersions","getSecondaryVersion","secondaryVersion","satisfies","warn","getImageUriForTool","findWorkspaceRoot","relativePath","relative","trim","defaultEnv","hasDockerSocketMount","v","dockerSocketEnv","value","envArgs","flatMap","hostUserIds","userIdEnvArgs","finalArgs","dockerArgs","privileged","p","getVolumeName","lockMany","locked","label","time","result","timeEnd","stdout"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAAA,4BAAA,EAAA;AAqBA,IAAMC,iCAAiBC,oBAAA,CAAA,MAAA;AAEnB,EAAA,MAAMC,QAAAA,GAAWC,oBAAGD,QAAAA,EAAQ;AAC5B,EAAA,IAAIA,QAAAA,CAASE,GAAAA,KAAQ,EAAA,IAAMF,QAAAA,CAASG,QAAQ,EAAA,EAAI;AAC5C,IAAA,OAAOC,MAAAA;AACX,EAAA;AAEA,EAAA,OAAO;AAAEF,IAAAA,GAAAA,EAAKF,QAAAA,CAASE,GAAAA;AAAKC,IAAAA,GAAAA,EAAKH,QAAAA,CAASG;AAAI,GAAA;AAClD,CAAA,EARuB,gBAAA,CAAA;AAWvBE,IAAAA,CAAEC,OAAAA,GAAU,IAAA;AACZD,IAAAA,CAAEE,KAAAA,GAAQ;AAAC,EAAA,SAAA;AAAW,EAAA,MAAA;EAAQC,wBAAAA,CAAQC;;AAMtC,IAAMC,YAAAA,mBAAeX,oBAAA,CAAA,CACjBY,cAAAA,EACAC,WAAAA,KACkBC,gBAAAA,CAAO;AAAID,EAAAA,GAAAA,WAAAA;AAAgBD,EAAAA,GAAAA;GAAiB,CAACG,MAAAA,KAAWA,MAAAA,CAAOC,aAAa,CAAA,EAH7E,cAAA,CAAA;AAWrB,IAAMC,kBAAAA,mBAAqBjB,oBAAA,CAAA,CAACkB,OAAAA,EAA0BC,aAAAA,KAClDD,OAAAA,CAAQE,IAAI,CAACL,MAAAA,KACTA,MAAAA,CAAOM,IAAAA,KAAS,MAAA,GACV;EACI,GAAGN,MAAAA;EACHO,QAAAA,EAAUC,qBAAAA,CAAKC,OAAAA,CACXL,aAAAA,EACAJ,MAAAA,CAAOO,QAAAA,CAASG,QAAQ,IAAA,EAAMvB,mBAAAA,CAAGwB,OAAAA,EAAO,CAAA;AAEhD,CAAA,GACAX,MAAAA,CAAAA,EAVa,oBAAA,CAAA;AAa3B,IAAMY,iBAAAA,+CAA2BC,QAAAA,KAAAA;AAC7B,EAAA,IAAIC,MAAAA;AAEJ,EAAA,IAAI;AAWAA,IAAAA,MAAAA,GAAS,MAAMvB,IAAAA,CAAAA,sCAAAA,EAA0CsB,QAAAA,CAAAA,CAAAA,CAAWE,OAAAA,GAAUC,KAAAA,EAAK;AACnF,IAAA,IAAI,CAACF,OAAOG,QAAAA,EAAU;AAClBC,MAAAA,OAAAA,CAAQC,IAAAA,CAAK,CAAA,kCAAA,EAAgCN,QAAAA,CAAAA,CAAU,CAAA;AACvD,MAAA;AACJ,IAAA;AAEAK,IAAAA,OAAAA,CAAQC,IAAAA,CAAK,wCAAiCN,QAAAA,CAAAA;AAC9CC,IAAAA,MAAAA,GAAS,MAAMvB,IAAAA,CAAAA,YAAAA,EAAgBsB,QAAAA,CAAAA,CAAAA,CAAWE,OAAAA,EAAO;AACrD,EAAA,CAAA,CAAA,OAASK,KAAAA,EAAgB;AACrB,IAAA,MAAM,IAAIC,MAAM,CAAA,4BAAA,EAA+BR,QAAAA,KAAaS,2BAAAA,CAAeF,KAAAA,CAAAA,CAAAA,CAAQ,CAAA;AACvF,EAAA;AAEA,EAAA,IAAIN,OAAOG,QAAAA,EAAU;AACjB,IAAA,MAAMtB,MAAAA,GAASmB,OAAOnB,MAAAA,IAAU,EAAA;AAChC,IAAA,MAAM4B,WAAAA,GACF5B,MAAAA,CAAO6B,QAAAA,CAAS,iCAAA,CAAA,IAChB7B,MAAAA,CAAO6B,QAAAA,CAAS,QAAA,CAAA,IAChB7B,MAAAA,CAAO6B,QAAAA,CAAS,oBAAA,CAAA;AAEpB,IAAA,MAAM,IAAIH,KAAAA,CACN;AACI,MAAA,6BAAA;AACA,MAAA,CAAA,WAAA,EAAcR,QAAAA,CAAAA,cAAAA,CAAAA;AACdU,MAAAA,WAAAA,GACM,gDAAA,GACA;AACRE,KAAAA,CAAAA,IAAAA,CAAK,IAAA,CAAA,CAAA;AAEf,EAAA;AAEAP,EAAAA,OAAAA,CAAQC,IAAAA,CAAK,CAAA,4BAAA,EAA0BN,QAAAA,CAAAA,CAAU,CAAA;AACrD,CAAA,EA7C0B,mBAAA,CAAA;AA6D1B,eAAsBa,mBAClBC,OAAAA,EACAC,QAAAA,EACAC,IAAAA,EACA,EACIC,KACA3B,OAAAA,EAASL,WAAAA,EACTiC,gBAAAA,EAAkBC,UAAAA,EAClBC,KAAKC,aAAAA,EACLC,MAAAA,EACAC,SACAC,QAAAA,GAAW,IAAE,EACa;AAE9B,EAAA,MAAMC,IAAAA,GAAOC,4BAAAA,CAAeZ,OAAAA,EAASC,QAAAA,CAAAA;AAGrC,EAAA,IAAIU,KAAKE,UAAAA,EAAY;AACjB,IAAA,MAAMF,IAAAA,CAAKE,WAAWb,OAAAA,EAAS;AAC3BG,MAAAA,GAAAA;AACAD,MAAAA,IAAAA;MACA1B,OAAAA,EAASL,WAAAA;MACTmC,GAAAA,EAAKC,aAAAA;AACLC,MAAAA,MAAAA;AACAC,MAAAA,OAAAA;AACAC,MAAAA;KACJ,CAAA;AACJ,EAAA;AAGA,EAAA,MAAMxC,cAAAA,GAAiByC,IAAAA,CAAKzC,cAAAA,IAAkB,EAAA;AAC9C,EAAA,MAAMM,OAAAA,GAAUP,YAAAA,CAAaC,cAAAA,EAAgBC,WAAAA,CAAAA;AAE7C,EAAA,IAAID,cAAAA,CAAe4C,SAAS,CAAA,EAAG;AAC3BvB,IAAAA,OAAAA,CAAQC,KAAK,CAAA,gBAAA,EAAYtB,cAAAA,CAAe4C,MAAM,CAAA,6BAAA,EAAgCH,IAAAA,CAAKI,IAAI,CAAA,CAAE,CAAA;AACzF,IAAA,IAAI5C,WAAAA,CAAY2C,SAAS,CAAA,EAAG;AACxB,MAAA,MAAME,SAAAA,GAAY7C,WAAAA,CAAY8C,MAAAA,CAAO,CAACC,EAAAA,KAClChD,cAAAA,CAAeiD,IAAAA,CAAK,CAACC,EAAAA,KAAOA,EAAAA,CAAG9C,aAAAA,KAAkB4C,EAAAA,CAAG5C,aAAa,CAAA,CAAA;AAErE,MAAA,IAAI0C,SAAAA,CAAUF,SAAS,CAAA,EAAG;AACtBvB,QAAAA,OAAAA,CAAQC,IAAAA,CAAK,CAAA,gCAAA,EAA4BwB,SAAAA,CAAUF,MAAM,CAAA,kBAAA,CAAoB,CAAA;AACjF,MAAA;AACJ,IAAA;AACJ,EAAA;AAGA,EAAA,MAAMO,kBAAkBC,gCAAAA,CAAoBtB,OAAAA,EAASU,QAAAA,CAAAA,CAAUC,KAAKI,IAAI,CAAA;AAExE,EAAA,IAAI,CAACM,eAAAA,EAAiB;AAClB,IAAA,MAAM,IAAI3B,KAAAA,CAAM,CAAA,6BAAA,EAAgCiB,IAAAA,CAAKI,IAAI,CAAA,CAAE,CAAA;AAC/D,EAAA;AAEAxB,EAAAA,OAAAA,CAAQC,KAAK,CAAA,UAAA,EAAMmB,IAAAA,CAAKI,IAAI,CAAA,UAAA,EAAaM,eAAAA,CAAAA,CAAiB,CAAA;AAG1D,EAAA,IAAIV,KAAKY,mBAAAA,EAAqB;AAC1B,IAAA,IAAI;AACA,MAAA,MAAMC,gBAAAA,GAAmB,MAAMb,IAAAA,CAAKY,mBAAAA,CAAoB;AAAEpB,QAAAA;OAAI,CAAA;AAE9D,MAAA,IAAI,CAAQsB,iBAAAA,CAAAA,SAAAA,CAAUD,gBAAAA,EAAkBH,eAAAA,CAAAA,EAAkB;AACtD9B,QAAAA,OAAAA,CAAQmC,IAAAA,CACJ,CAAA,sCAAA,EAAyCF,gBAAAA,CAAAA,iCAAAA,EAAoDH,eAAAA,CAAAA,CAAAA,CAAkB,CAAA;AAEvH,MAAA;AACJ,IAAA,CAAA,CAAA,OAAS5B,KAAAA,EAAO;AAEZF,MAAAA,OAAAA,CAAQmC,IAAAA,CAAK,uCAAA,EAAyC/B,2BAAAA,CAAeF,KAAAA,CAAAA,CAAAA;AACzE,IAAA;AACJ,EAAA;AAGA,EAAA,MAAMP,WAAW,MAAMyC,gCAAAA,CAAmB3B,OAAAA,EAASW,IAAAA,CAAKI,MAAMM,eAAAA,CAAAA;AAC9D,EAAA,MAAM5C,aAAAA,GAAgB,MAAMmD,+BAAAA,CAAkBzB,GAAAA,CAAAA;AAC9C,EAAA,MAAM0B,YAAAA,GAAehD,qBAAAA,CAAKiD,QAAAA,CAASrD,aAAAA,EAAe0B,GAAAA,CAAAA;AAElD,EAAA,MAAMlB,kBAAkBC,QAAAA,CAAAA;AAExB,EAAA,IAAImB,UAAAA,EAAY0B,MAAAA,EAAQ;AACpBxC,IAAAA,OAAAA,CAAQC,IAAAA,CAAK,CAAA,mCAAA,EAA+Ba,UAAAA,CAAAA,CAAY,CAAA;AAC5D,EAAA;AAGA,EAAA,MAAM2B,UAAAA,GAAarB,IAAAA,CAAKqB,UAAAA,IAAc,EAAA;AAItC,EAAA,MAAMC,oBAAAA,GAAuBzD,OAAAA,CAAQ2C,IAAAA,CACjC,CAACe,CAAAA,KAAMA,EAAEvD,IAAAA,KAAS,MAAA,IAAUuD,CAAAA,CAAE5D,aAAAA,KAAkB,sBAAA,CAAA;AAEpD,EAAA,MAAM6D,kBAAyCF,oBAAAA,GACzC;AACI,IAAA;MAAElB,IAAAA,EAAM,UAAA;MAAYqB,KAAAA,EAAOjC;AAAI,KAAA;AAC/B,IAAA;MAAEY,IAAAA,EAAM,qBAAA;MAAuBqB,KAAAA,EAAO3D;AAAc;MAExD,EAAA;AAEN,EAAA,MAAM4D,UAAUjE,gBAAAA,CACZ;AAAImC,IAAAA,GAAAA,aAAAA;AAAkB4B,IAAAA,GAAAA,eAAAA;AAAoBH,IAAAA,GAAAA;KAC1C,CAAC,EAAEjB,IAAAA,EAAI,KAAOA,IAAAA,CAAAA,CAChBuB,QAAQ,CAAC,EAAEvB,IAAAA,EAAMqB,KAAAA,EAAK,KAAO;AAAC,IAAA,IAAA;IAAM,CAAA,EAAGrB,IAAAA,IAAQqB,KAAAA,CAAAA;AAAQ,GAAA,CAAA;AAKzD,EAAA,MAAMG,cAAclF,cAAAA,EAAAA;AACpB,EAAA,MAAMmF,gBAAgBD,WAAAA,GAChB;AAAC,IAAA,IAAA;AAAM,IAAA,CAAA,UAAA,EAAaA,YAAY9E,GAAG,CAAA,CAAA;AAAI,IAAA,IAAA;AAAM,IAAA,CAAA,UAAA,EAAa8E,YAAY7E,GAAG,CAAA;MACzE,EAAA;AAEN6B,EAAAA,OAAAA,CAAQC,KAAK,CAAA,uCAAA,EAAmC+C,WAAAA,EAAa9E,GAAAA,CAAAA,CAAAA,EAAO8E,WAAAA,EAAa7E,GAAAA,CAAAA,CAAK,CAAA;AAEtF,EAAA,IAAIsE,UAAAA,CAAWlB,SAAS,CAAA,EAAG;AACvBvB,IAAAA,OAAAA,CAAQC,KACJ,CAAA,gBAAA,EAAYwC,UAAAA,CAAWlB,MAAM,CAAA,qCAAA,EAAwCH,IAAAA,CAAKI,IAAI,CAAA,CAAE,CAAA;AAExF,EAAA;AACA,EAAA,IAAIR,aAAAA,CAAcO,SAAS,CAAA,EAAG;AAC1BvB,IAAAA,OAAAA,CAAQC,IAAAA,CAAK,CAAA,gBAAA,EAAYe,aAAAA,CAAcO,MAAM,CAAA,+BAAA,CAAiC,CAAA;AAClF,EAAA;AAGA,EAAA,IAAI2B,SAAAA;AACJ,EAAA,IAAIjC,MAAAA,IAAUA,MAAAA,CAAOuB,IAAAA,EAAI,KAAO,EAAA,EAAI;AAChCxC,IAAAA,OAAAA,CAAQC,IAAAA,CAAK,CAAA,mCAAA,EAA+BgB,MAAAA,CAAAA,CAAQ,CAAA;AACpDiC,IAAAA,SAAAA,GAAY;AAAC,MAAA,MAAA;AAAQ,MAAA,IAAA;AAAMjC,MAAAA;;EAC/B,CAAA,MAAO;AACHiC,IAAAA,SAAAA,GAAYpC,eAAe1C,MAAAA,GAAY;MAACgD,IAAAA,CAAKI,IAAAA;AAASb,MAAAA,GAAAA;AAAQA,KAAAA,GAAAA,IAAAA;AAClE,EAAA;AAGA,EAAA,MAAMwC,UAAAA,GAAa;AACf,IAAA,KAAA;AACI/B,IAAAA,GAAAA,IAAAA,CAAKgC,UAAAA,GAAa;AAAC,MAAA;QAAkB,EAAA;AACzC,IAAA,MAAA;AACA,IAAA,8CAAA;AACGN,IAAAA,GAAAA,OAAAA;AACAG,IAAAA,GAAAA,aAAAA;AACH,IAAA,IAAA;AACA,IAAA,CAAA,EAAG/D,aAAAA,CAAAA,WAAAA,CAAAA;AACH,IAAA,IAAA;AACA,IAAA,CAAA,WAAA,EAAcoD,YAAAA,CAAAA,CAAAA;AACVpB,IAAAA,GAAAA,CAAAA,OAAAA,IAAW,EAAA,EAAI6B,OAAAA,CAAQ,CAACM,CAAAA,KAAM;AAAC,MAAA,IAAA;AAAMA,MAAAA,CAAAA,CAAEb,IAAAA;AAAO,KAAA,CAAA;AAC/CxD,IAAAA,GAAAA,kBAAAA,CAAmBC,OAAAA,EAASC,aAAAA,CAAAA,CAAe6D,OAAAA,CAAQ,CAACjE,MAAAA,KAAW;AAC9D,MAAA,IAAA;AACAwE,MAAAA,2BAAAA,CAAcxE,MAAAA;AACjB,KAAA,CAAA;OACGgC,UAAAA,GAAa;AAAC,MAAA,cAAA;AAAgBA,MAAAA;QAAc,EAAA;AAChDnB,IAAAA,QAAAA;AACGuD,IAAAA,GAAAA;;AAGP,EAAA,MAAMtD,MAAAA,GAAS,MAAM2D,qBAAAA,CACjBtE,OAAAA,CAAQ8D,OAAAA,CAAQ,CAACjE,MAAAA,KACbA,MAAAA,CAAOM,IAAAA,KAAS,SAAA,IAAaN,MAAAA,CAAO0E,MAAAA,GAAS;IAAC1E,MAAAA,CAAO0C;MAAQ,EAAE,GAEnE,YAAA;AACI,IAAA,MAAMiC,KAAAA,GAAQ,CAAA,aAAA,EAAMP,SAAAA,CAAU3C,IAAAA,CAAK,GAAA,CAAA,CAAA,CAAA;AACnCP,IAAAA,OAAAA,CAAQ0D,KAAKD,KAAAA,CAAAA;AACb,IAAA,MAAME,MAAAA,GAAS,MAAMtF,IAAAA,CAAAA,OAAAA,EAAW8E,UAAAA,GAAatD,OAAAA,EAAO;AACpDG,IAAAA,OAAAA,CAAQ4D,QAAQH,KAAAA,CAAAA;AAEhB,IAAA,OAAOE,MAAAA;EACX,CAAA,CAAA;AAGJ,EAAA,IAAI/D,OAAOG,QAAAA,EAAU;AACjB,IAAA,MAAM8D,MAAAA,GAASjE,MAAAA,CAAOiE,MAAAA,CAAOrB,IAAAA,EAAI;AACjC,IAAA,MAAM,IAAIrC,KAAAA,CACN,CAAA,2CAAA,EAA8CP,MAAAA,CAAOG,QAAQ,IAAI8D,MAAAA,GAAS;EAAKA,MAAAA,CAAAA,CAAAA,GAAW,EAAA,CAAA,CAAI,CAAA;AAEtG,EAAA;AAEA,EAAA,OAAOjE,MAAAA;AACX;AA7KsBY,oBAAAA,CAAAA,kBAAAA,EAAAA,oBAAAA,CAAAA","file":"NQIX4C7Z.cjs","sourcesContent":["import { uniqBy } from 'es-toolkit';\nimport os from 'node:os';\nimport path from 'node:path';\nimport process from 'node:process';\nimport * as semver from 'semver';\nimport { $, type ProcessOutput } from 'zx';\n\nimport type { EnvironmentVariable, VolumeMapping } from '../config';\nimport type { ChainContext } from '../context';\nimport { findWorkspaceRoot } from '../utils';\nimport { getImageUriForTool, getVolumeName } from '../utils/docker';\nimport { stringifyError } from '../utils/error';\nimport { findToolByName } from '../utils/finder';\nimport { lockMany } from './lock';\nimport { resolveTypeVersions } from './version-resolver';\n\n/**\n * Get the current user's UID and GID for Docker container user matching.\n * This prevents permission issues when containers write to bind-mounted directories.\n * On Windows or when running as root, returns undefined as UID/GID matching is not needed.\n */\nconst getHostUserIds = (): { uid: number; gid: number } | undefined => {\n    // os.userInfo() returns uid/gid on POSIX systems, -1 on Windows\n    const userInfo = os.userInfo();\n    if (userInfo.uid === -1 || userInfo.gid === -1) {\n        return undefined;\n    }\n\n    return { uid: userInfo.uid, gid: userInfo.gid };\n};\n\n// Configure zx to inherit stdio by default (moved from original setup)\n$.verbose = true;\n$.stdio = ['inherit', 'pipe', process.stderr];\n\n/**\n * Merge default volumes with user-specified volumes\n * User volumes take precedence when containerPath conflicts\n */\nconst mergeVolumes = (\n    defaultVolumes: readonly VolumeMapping[],\n    userVolumes: readonly VolumeMapping[],\n): VolumeMapping[] => uniqBy([...userVolumes, ...defaultVolumes], (volume) => volume.containerPath);\n\n/**\n * Resolve host paths in volumes to absolute paths\n * - Paths starting with ~ are resolved to home directory\n * - Relative paths (starting with . or no prefix) are resolved to workspace root\n * - Absolute paths are left unchanged\n */\nconst resolveVolumePaths = (volumes: VolumeMapping[], workspaceRoot: string): VolumeMapping[] =>\n    volumes.map((volume) =>\n        volume.type === 'host'\n            ? {\n                  ...volume,\n                  hostPath: path.resolve(\n                      workspaceRoot,\n                      volume.hostPath.replace(/^~/, os.homedir()),\n                  ),\n              }\n            : volume,\n    );\n\nconst ensureDockerImage = async (imageUri: string): Promise<void> => {\n    let output: ProcessOutput;\n\n    try {\n        // Check local images first.\n        //\n        // NOTE: `docker image ls <ref>` prints repository/tag in separate columns, so\n        // `stdout.includes(<full-ref>)` is not reliable. Use `inspect` instead: exitCode=0\n        // means the image exists locally.\n        // Keep output minimal to avoid dumping full inspect JSON into CI logs.\n        //\n        // NOTE: Using `.quiet()` to avoid stderr being captured in the CI logs. If the image\n        // is not in the cache, the process prints \"Error response from daemon: No such image: ...\"\n        // which can confuse the uninitiated. It's just a cache miss, not an error.\n        output = await $`docker image inspect --format {{.Id}} ${imageUri}`.nothrow().quiet();\n        if (!output.exitCode) {\n            console.info(`✅ Using cached Docker image: ${imageUri}`);\n            return;\n        }\n\n        console.info('📥 Pulling Docker image from:', imageUri);\n        output = await $`docker pull ${imageUri}`.nothrow();\n    } catch (error: unknown) {\n        throw new Error(`Failed to pull Docker image ${imageUri}: ${stringifyError(error)}`);\n    }\n\n    if (output.exitCode) {\n        const stderr = output.stderr ?? '';\n        const isAuthError =\n            stderr.includes('authorization token has expired') ||\n            stderr.includes('denied') ||\n            stderr.includes('pull access denied');\n\n        throw new Error(\n            [\n                'Docker image not available:',\n                `  - Image: ${imageUri} (pull failed)`,\n                isAuthError\n                    ? '  - ECR auth expired. Run: pnpm localnet login'\n                    : '  - Check if the image tag exists in image registry.',\n            ].join('\\n'),\n        );\n    }\n\n    console.info(`✅ Successfully pulled: ${imageUri}`);\n};\n\nexport interface ToolCommandExecutionOptions {\n    cwd: string;\n    volumes: readonly VolumeMapping[];\n    customEntrypoint?: string;\n    env: EnvironmentVariable[];\n    args?: string[];\n    script?: string;\n    publish?: string[];\n    versions?: Record<string, string>;\n}\n\n/**\n * Enhanced tool command execution using the new version compatibility matrix system\n */\nexport async function executeToolCommand<TImageId extends string>(\n    context: ChainContext<TImageId>,\n    toolName: string,\n    args: string[],\n    {\n        cwd,\n        volumes: userVolumes,\n        customEntrypoint: entrypoint,\n        env: customEnvVars,\n        script,\n        publish,\n        versions = {},\n    }: ToolCommandExecutionOptions,\n): Promise<ProcessOutput> {\n    const tool = findToolByName(context, toolName);\n\n    // Run pre-execution hook if defined (e.g., toolchain sync)\n    if (tool.preExecute) {\n        await tool.preExecute(context, {\n            cwd,\n            args,\n            volumes: userVolumes,\n            env: customEnvVars,\n            script,\n            publish,\n            versions,\n        });\n    }\n\n    // Merge default volumes with user-specified volumes\n    const defaultVolumes = tool.defaultVolumes ?? [];\n    const volumes = mergeVolumes(defaultVolumes, userVolumes);\n\n    if (defaultVolumes.length > 0) {\n        console.info(`📦 Using ${defaultVolumes.length} default cache volume(s) for ${tool.name}`);\n        if (userVolumes.length > 0) {\n            const overrides = userVolumes.filter((uv) =>\n                defaultVolumes.some((dv) => dv.containerPath === uv.containerPath),\n            );\n            if (overrides.length > 0) {\n                console.info(`🔧 User volumes override ${overrides.length} default volume(s)`);\n            }\n        }\n    }\n\n    // Get the resolved version for the current tool.\n    const resolvedVersion = resolveTypeVersions(context, versions)[tool.name];\n\n    if (!resolvedVersion) {\n        throw new Error(`No version resolved for tool ${tool.name}`);\n    }\n\n    console.info(`🔧 ${tool.name} version: ${resolvedVersion}`);\n\n    // Check secondary version validation if available\n    if (tool.getSecondaryVersion) {\n        try {\n            const secondaryVersion = await tool.getSecondaryVersion({ cwd });\n\n            if (!semver.satisfies(secondaryVersion, resolvedVersion)) {\n                console.warn(\n                    `Warning: Local configuration version (${secondaryVersion}) differs from resolved version (${resolvedVersion})`,\n                );\n            }\n        } catch (error) {\n            // Secondary version check failed, but continue with resolved version\n            console.warn('Could not validate secondary version:', stringifyError(error));\n        }\n    }\n\n    // Use Docker image with merged volumes\n    const imageUri = await getImageUriForTool(context, tool.name, resolvedVersion);\n    const workspaceRoot = await findWorkspaceRoot(cwd);\n    const relativePath = path.relative(workspaceRoot, cwd);\n\n    await ensureDockerImage(imageUri);\n\n    if (entrypoint?.trim()) {\n        console.info(`🔧 Using custom entrypoint: ${entrypoint}`);\n    }\n\n    // Merge default env vars with custom env vars (custom takes precedence)\n    const defaultEnv = tool.defaultEnv ?? [];\n\n    // Check if Docker socket is mounted (for tools that spawn Docker containers like anchor --verifiable)\n    // If so, inject HOST_CWD and HOST_WORKSPACE_ROOT so the inner container knows the host paths\n    const hasDockerSocketMount = volumes.some(\n        (v) => v.type === 'host' && v.containerPath === '/var/run/docker.sock',\n    );\n    const dockerSocketEnv: EnvironmentVariable[] = hasDockerSocketMount\n        ? [\n              { name: 'HOST_CWD', value: cwd },\n              { name: 'HOST_WORKSPACE_ROOT', value: workspaceRoot },\n          ]\n        : [];\n\n    const envArgs = uniqBy(\n        [...customEnvVars, ...dockerSocketEnv, ...defaultEnv],\n        ({ name }) => name,\n    ).flatMap(({ name, value }) => ['-e', `${name}=${value}`]);\n\n    // Add host user UID/GID for permission matching on Linux/macOS\n    // This prevents artifacts created in containers from having root ownership\n    // Currently only used for stellar which has an entrypoint that handles UID/GID\n    const hostUserIds = getHostUserIds();\n    const userIdEnvArgs = hostUserIds\n        ? ['-e', `LOCAL_UID=${hostUserIds.uid}`, '-e', `LOCAL_GID=${hostUserIds.gid}`]\n        : [];\n\n    console.info(`👤 Running container as UID:GID ${hostUserIds?.uid}:${hostUserIds?.gid}`);\n\n    if (defaultEnv.length > 0) {\n        console.info(\n            `🌍 Using ${defaultEnv.length} default environment variable(s) for ${tool.name}`,\n        );\n    }\n    if (customEnvVars.length > 0) {\n        console.info(`🌍 Using ${customEnvVars.length} custom environment variable(s)`);\n    }\n\n    // Handle custom script execution\n    let finalArgs: string[];\n    if (script && script.trim() !== '') {\n        console.info(`📜 Executing custom script: ${script}`);\n        finalArgs = ['bash', '-c', script];\n    } else {\n        finalArgs = entrypoint === undefined ? [tool.name, ...args] : args;\n    }\n\n    // Build the Docker command with proper argument separation\n    const dockerArgs = [\n        'run',\n        ...(tool.privileged ? ['--privileged'] : []),\n        '--rm',\n        '--add-host=host.docker.internal:host-gateway',\n        ...envArgs,\n        ...userIdEnvArgs,\n        '-v',\n        `${workspaceRoot}:/workspace`,\n        '-w',\n        `/workspace/${relativePath}`,\n        ...(publish ?? []).flatMap((p) => ['-p', p.trim()]),\n        ...resolveVolumePaths(volumes, workspaceRoot).flatMap((volume) => [\n            '-v',\n            getVolumeName(volume),\n        ]),\n        ...(entrypoint ? ['--entrypoint', entrypoint] : []),\n        imageUri,\n        ...finalArgs,\n    ];\n\n    const output = await lockMany(\n        volumes.flatMap((volume) =>\n            volume.type === 'isolate' && volume.locked ? [volume.name] : [],\n        ),\n        async () => {\n            const label = `⏱️ ${finalArgs.join(' ')}`;\n            console.time(label);\n            const result = await $`docker ${dockerArgs}`.nothrow();\n            console.timeEnd(label);\n\n            return result;\n        },\n    );\n\n    if (output.exitCode) {\n        const stdout = output.stdout.trim();\n        throw new Error(\n            `Failed to run Docker container (exit code: ${output.exitCode})${stdout ? `\\n${stdout}` : ''}`,\n        );\n    }\n\n    return output;\n}\n"]}
+{"version":3,"sources":["../src/core/tool-executor.ts"],"names":["init_cjs_shims","getHostUserIds","__name","userInfo","os","uid","gid","undefined","$","verbose","stdio","process","stderr","mergeVolumes","defaultVolumes","userVolumes","uniqBy","volume","containerPath","resolveVolumePaths","volumes","workspaceRoot","map","type","hostPath","path","resolve","replace","homedir","ensureDockerImage","imageUri","output","nothrow","quiet","exitCode","console","info","error","Error","stringifyError","isAuthError","includes","join","executeToolCommand","context","toolName","args","cwd","customEntrypoint","entrypoint","env","customEnvVars","script","publish","versions","tool","findToolByName","preExecute","length","name","overrides","filter","uv","some","dv","resolvedVersion","resolveTypeVersions","getSecondaryVersion","secondaryVersion","satisfies","warn","getImageUriForTool","findWorkspaceRoot","relativePath","relative","trim","defaultEnv","hasDockerSocketMount","v","dockerSocketEnv","value","envArgs","flatMap","hostUserIds","userIdEnvArgs","finalArgs","dockerArgs","privileged","p","getVolumeName","lockMany","locked","label","time","result","timeEnd","stdout"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAAA,4BAAA,EAAA;AAqBA,IAAMC,iCAAiBC,oBAAA,CAAA,MAAA;AAEnB,EAAA,MAAMC,QAAAA,GAAWC,oBAAGD,QAAAA,EAAQ;AAC5B,EAAA,IAAIA,QAAAA,CAASE,GAAAA,KAAQ,EAAA,IAAMF,QAAAA,CAASG,QAAQ,EAAA,EAAI;AAC5C,IAAA,OAAOC,MAAAA;AACX,EAAA;AAEA,EAAA,OAAO;AAAEF,IAAAA,GAAAA,EAAKF,QAAAA,CAASE,GAAAA;AAAKC,IAAAA,GAAAA,EAAKH,QAAAA,CAASG;AAAI,GAAA;AAClD,CAAA,EARuB,gBAAA,CAAA;AAWvBE,IAAAA,CAAEC,OAAAA,GAAU,IAAA;AACZD,IAAAA,CAAEE,KAAAA,GAAQ;AAAC,EAAA,SAAA;AAAW,EAAA,MAAA;EAAQC,wBAAAA,CAAQC;;AAMtC,IAAMC,YAAAA,mBAAeX,oBAAA,CAAA,CACjBY,cAAAA,EACAC,WAAAA,KACkBC,gBAAAA,CAAO;AAAID,EAAAA,GAAAA,WAAAA;AAAgBD,EAAAA,GAAAA;GAAiB,CAACG,MAAAA,KAAWA,MAAAA,CAAOC,aAAa,CAAA,EAH7E,cAAA,CAAA;AAWrB,IAAMC,kBAAAA,mBAAqBjB,oBAAA,CAAA,CAACkB,OAAAA,EAA0BC,aAAAA,KAClDD,OAAAA,CAAQE,IAAI,CAACL,MAAAA,KACTA,MAAAA,CAAOM,IAAAA,KAAS,MAAA,GACV;EACI,GAAGN,MAAAA;EACHO,QAAAA,EAAUC,qBAAAA,CAAKC,OAAAA,CACXL,aAAAA,EACAJ,MAAAA,CAAOO,QAAAA,CAASG,QAAQ,IAAA,EAAMvB,mBAAAA,CAAGwB,OAAAA,EAAO,CAAA;AAEhD,CAAA,GACAX,MAAAA,CAAAA,EAVa,oBAAA,CAAA;AAa3B,IAAMY,iBAAAA,+CAA2BC,QAAAA,KAAAA;AAC7B,EAAA,IAAIC,MAAAA;AAEJ,EAAA,IAAI;AAWAA,IAAAA,MAAAA,GAAS,MAAMvB,IAAAA,CAAAA,sCAAAA,EAA0CsB,QAAAA,CAAAA,CAAAA,CAAWE,OAAAA,GAAUC,KAAAA,EAAK;AACnF,IAAA,IAAI,CAACF,OAAOG,QAAAA,EAAU;AAClBC,MAAAA,OAAAA,CAAQC,IAAAA,CAAK,CAAA,kCAAA,EAAgCN,QAAAA,CAAAA,CAAU,CAAA;AACvD,MAAA;AACJ,IAAA;AAEAK,IAAAA,OAAAA,CAAQC,IAAAA,CAAK,wCAAiCN,QAAAA,CAAAA;AAC9CC,IAAAA,MAAAA,GAAS,MAAMvB,IAAAA,CAAAA,YAAAA,EAAgBsB,QAAAA,CAAAA,CAAAA,CAAWE,OAAAA,EAAO;AACrD,EAAA,CAAA,CAAA,OAASK,KAAAA,EAAgB;AACrB,IAAA,MAAM,IAAIC,MAAM,CAAA,4BAAA,EAA+BR,QAAAA,KAAaS,2BAAAA,CAAeF,KAAAA,CAAAA,CAAAA,CAAQ,CAAA;AACvF,EAAA;AAEA,EAAA,IAAIN,OAAOG,QAAAA,EAAU;AACjB,IAAA,MAAMtB,MAAAA,GAASmB,OAAOnB,MAAAA,IAAU,EAAA;AAChC,IAAA,MAAM4B,WAAAA,GACF5B,MAAAA,CAAO6B,QAAAA,CAAS,iCAAA,CAAA,IAChB7B,MAAAA,CAAO6B,QAAAA,CAAS,QAAA,CAAA,IAChB7B,MAAAA,CAAO6B,QAAAA,CAAS,oBAAA,CAAA;AAEpB,IAAA,MAAM,IAAIH,KAAAA,CACN;AACI,MAAA,6BAAA;AACA,MAAA,CAAA,WAAA,EAAcR,QAAAA,CAAAA,cAAAA,CAAAA;AACdU,MAAAA,WAAAA,GACM,gDAAA,GACA;AACRE,KAAAA,CAAAA,IAAAA,CAAK,IAAA,CAAA,CAAA;AAEf,EAAA;AAEAP,EAAAA,OAAAA,CAAQC,IAAAA,CAAK,CAAA,4BAAA,EAA0BN,QAAAA,CAAAA,CAAU,CAAA;AACrD,CAAA,EA7C0B,mBAAA,CAAA;AA6D1B,eAAsBa,mBAClBC,OAAAA,EACAC,QAAAA,EACAC,IAAAA,EACA,EACIC,KACA3B,OAAAA,EAASL,WAAAA,EACTiC,gBAAAA,EAAkBC,UAAAA,EAClBC,KAAKC,aAAAA,EACLC,MAAAA,EACAC,SACAC,QAAAA,GAAW,IAAE,EACa;AAE9B,EAAA,MAAMC,IAAAA,GAAOC,4BAAAA,CAAeZ,OAAAA,EAASC,QAAAA,CAAAA;AAGrC,EAAA,IAAIU,KAAKE,UAAAA,EAAY;AACjB,IAAA,MAAMF,IAAAA,CAAKE,WAAWb,OAAAA,EAAS;AAC3BG,MAAAA,GAAAA;AACAD,MAAAA,IAAAA;MACA1B,OAAAA,EAASL,WAAAA;MACTmC,GAAAA,EAAKC,aAAAA;AACLC,MAAAA,MAAAA;AACAC,MAAAA,OAAAA;AACAC,MAAAA;KACJ,CAAA;AACJ,EAAA;AAGA,EAAA,MAAMxC,cAAAA,GAAiByC,IAAAA,CAAKzC,cAAAA,IAAkB,EAAA;AAC9C,EAAA,MAAMM,OAAAA,GAAUP,YAAAA,CAAaC,cAAAA,EAAgBC,WAAAA,CAAAA;AAE7C,EAAA,IAAID,cAAAA,CAAe4C,SAAS,CAAA,EAAG;AAC3BvB,IAAAA,OAAAA,CAAQC,KAAK,CAAA,gBAAA,EAAYtB,cAAAA,CAAe4C,MAAM,CAAA,6BAAA,EAAgCH,IAAAA,CAAKI,IAAI,CAAA,CAAE,CAAA;AACzF,IAAA,IAAI5C,WAAAA,CAAY2C,SAAS,CAAA,EAAG;AACxB,MAAA,MAAME,SAAAA,GAAY7C,WAAAA,CAAY8C,MAAAA,CAAO,CAACC,EAAAA,KAClChD,cAAAA,CAAeiD,IAAAA,CAAK,CAACC,EAAAA,KAAOA,EAAAA,CAAG9C,aAAAA,KAAkB4C,EAAAA,CAAG5C,aAAa,CAAA,CAAA;AAErE,MAAA,IAAI0C,SAAAA,CAAUF,SAAS,CAAA,EAAG;AACtBvB,QAAAA,OAAAA,CAAQC,IAAAA,CAAK,CAAA,gCAAA,EAA4BwB,SAAAA,CAAUF,MAAM,CAAA,kBAAA,CAAoB,CAAA;AACjF,MAAA;AACJ,IAAA;AACJ,EAAA;AAGA,EAAA,MAAMO,kBAAkBC,gCAAAA,CAAoBtB,OAAAA,EAASU,QAAAA,CAAAA,CAAUC,KAAKI,IAAI,CAAA;AAExE,EAAA,IAAI,CAACM,eAAAA,EAAiB;AAClB,IAAA,MAAM,IAAI3B,KAAAA,CAAM,CAAA,6BAAA,EAAgCiB,IAAAA,CAAKI,IAAI,CAAA,CAAE,CAAA;AAC/D,EAAA;AAEAxB,EAAAA,OAAAA,CAAQC,KAAK,CAAA,UAAA,EAAMmB,IAAAA,CAAKI,IAAI,CAAA,UAAA,EAAaM,eAAAA,CAAAA,CAAiB,CAAA;AAG1D,EAAA,IAAIV,KAAKY,mBAAAA,EAAqB;AAC1B,IAAA,IAAI;AACA,MAAA,MAAMC,gBAAAA,GAAmB,MAAMb,IAAAA,CAAKY,mBAAAA,CAAoB;AAAEpB,QAAAA;OAAI,CAAA;AAE9D,MAAA,IAAI,CAAQsB,iBAAAA,CAAAA,SAAAA,CAAUD,gBAAAA,EAAkBH,eAAAA,CAAAA,EAAkB;AACtD9B,QAAAA,OAAAA,CAAQmC,IAAAA,CACJ,CAAA,sCAAA,EAAyCF,gBAAAA,CAAAA,iCAAAA,EAAoDH,eAAAA,CAAAA,CAAAA,CAAkB,CAAA;AAEvH,MAAA;AACJ,IAAA,CAAA,CAAA,OAAS5B,KAAAA,EAAO;AAEZF,MAAAA,OAAAA,CAAQmC,IAAAA,CAAK,uCAAA,EAAyC/B,2BAAAA,CAAeF,KAAAA,CAAAA,CAAAA;AACzE,IAAA;AACJ,EAAA;AAGA,EAAA,MAAMP,WAAW,MAAMyC,+BAAAA,CAAmB3B,OAAAA,EAASW,IAAAA,CAAKI,MAAMM,eAAAA,CAAAA;AAC9D,EAAA,MAAM5C,aAAAA,GAAgB,MAAMmD,+BAAAA,CAAkBzB,GAAAA,CAAAA;AAC9C,EAAA,MAAM0B,YAAAA,GAAehD,qBAAAA,CAAKiD,QAAAA,CAASrD,aAAAA,EAAe0B,GAAAA,CAAAA;AAElD,EAAA,MAAMlB,kBAAkBC,QAAAA,CAAAA;AAExB,EAAA,IAAImB,UAAAA,EAAY0B,MAAAA,EAAQ;AACpBxC,IAAAA,OAAAA,CAAQC,IAAAA,CAAK,CAAA,mCAAA,EAA+Ba,UAAAA,CAAAA,CAAY,CAAA;AAC5D,EAAA;AAGA,EAAA,MAAM2B,UAAAA,GAAarB,IAAAA,CAAKqB,UAAAA,IAAc,EAAA;AAItC,EAAA,MAAMC,oBAAAA,GAAuBzD,OAAAA,CAAQ2C,IAAAA,CACjC,CAACe,CAAAA,KAAMA,EAAEvD,IAAAA,KAAS,MAAA,IAAUuD,CAAAA,CAAE5D,aAAAA,KAAkB,sBAAA,CAAA;AAEpD,EAAA,MAAM6D,kBAAyCF,oBAAAA,GACzC;AACI,IAAA;MAAElB,IAAAA,EAAM,UAAA;MAAYqB,KAAAA,EAAOjC;AAAI,KAAA;AAC/B,IAAA;MAAEY,IAAAA,EAAM,qBAAA;MAAuBqB,KAAAA,EAAO3D;AAAc;MAExD,EAAA;AAEN,EAAA,MAAM4D,UAAUjE,gBAAAA,CACZ;AAAImC,IAAAA,GAAAA,aAAAA;AAAkB4B,IAAAA,GAAAA,eAAAA;AAAoBH,IAAAA,GAAAA;KAC1C,CAAC,EAAEjB,IAAAA,EAAI,KAAOA,IAAAA,CAAAA,CAChBuB,QAAQ,CAAC,EAAEvB,IAAAA,EAAMqB,KAAAA,EAAK,KAAO;AAAC,IAAA,IAAA;IAAM,CAAA,EAAGrB,IAAAA,IAAQqB,KAAAA,CAAAA;AAAQ,GAAA,CAAA;AAKzD,EAAA,MAAMG,cAAclF,cAAAA,EAAAA;AACpB,EAAA,MAAMmF,gBAAgBD,WAAAA,GAChB;AAAC,IAAA,IAAA;AAAM,IAAA,CAAA,UAAA,EAAaA,YAAY9E,GAAG,CAAA,CAAA;AAAI,IAAA,IAAA;AAAM,IAAA,CAAA,UAAA,EAAa8E,YAAY7E,GAAG,CAAA;MACzE,EAAA;AAEN6B,EAAAA,OAAAA,CAAQC,KAAK,CAAA,uCAAA,EAAmC+C,WAAAA,EAAa9E,GAAAA,CAAAA,CAAAA,EAAO8E,WAAAA,EAAa7E,GAAAA,CAAAA,CAAK,CAAA;AAEtF,EAAA,IAAIsE,UAAAA,CAAWlB,SAAS,CAAA,EAAG;AACvBvB,IAAAA,OAAAA,CAAQC,KACJ,CAAA,gBAAA,EAAYwC,UAAAA,CAAWlB,MAAM,CAAA,qCAAA,EAAwCH,IAAAA,CAAKI,IAAI,CAAA,CAAE,CAAA;AAExF,EAAA;AACA,EAAA,IAAIR,aAAAA,CAAcO,SAAS,CAAA,EAAG;AAC1BvB,IAAAA,OAAAA,CAAQC,IAAAA,CAAK,CAAA,gBAAA,EAAYe,aAAAA,CAAcO,MAAM,CAAA,+BAAA,CAAiC,CAAA;AAClF,EAAA;AAGA,EAAA,IAAI2B,SAAAA;AACJ,EAAA,IAAIjC,MAAAA,IAAUA,MAAAA,CAAOuB,IAAAA,EAAI,KAAO,EAAA,EAAI;AAChCxC,IAAAA,OAAAA,CAAQC,IAAAA,CAAK,CAAA,mCAAA,EAA+BgB,MAAAA,CAAAA,CAAQ,CAAA;AACpDiC,IAAAA,SAAAA,GAAY;AAAC,MAAA,MAAA;AAAQ,MAAA,IAAA;AAAMjC,MAAAA;;EAC/B,CAAA,MAAO;AACHiC,IAAAA,SAAAA,GAAYpC,eAAe1C,MAAAA,GAAY;MAACgD,IAAAA,CAAKI,IAAAA;AAASb,MAAAA,GAAAA;AAAQA,KAAAA,GAAAA,IAAAA;AAClE,EAAA;AAGA,EAAA,MAAMwC,UAAAA,GAAa;AACf,IAAA,KAAA;AACI/B,IAAAA,GAAAA,IAAAA,CAAKgC,UAAAA,GAAa;AAAC,MAAA;QAAkB,EAAA;AACzC,IAAA,MAAA;AACA,IAAA,8CAAA;AACGN,IAAAA,GAAAA,OAAAA;AACAG,IAAAA,GAAAA,aAAAA;AACH,IAAA,IAAA;AACA,IAAA,CAAA,EAAG/D,aAAAA,CAAAA,WAAAA,CAAAA;AACH,IAAA,IAAA;AACA,IAAA,CAAA,WAAA,EAAcoD,YAAAA,CAAAA,CAAAA;AACVpB,IAAAA,GAAAA,CAAAA,OAAAA,IAAW,EAAA,EAAI6B,OAAAA,CAAQ,CAACM,CAAAA,KAAM;AAAC,MAAA,IAAA;AAAMA,MAAAA,CAAAA,CAAEb,IAAAA;AAAO,KAAA,CAAA;AAC/CxD,IAAAA,GAAAA,kBAAAA,CAAmBC,OAAAA,EAASC,aAAAA,CAAAA,CAAe6D,OAAAA,CAAQ,CAACjE,MAAAA,KAAW;AAC9D,MAAA,IAAA;AACAwE,MAAAA,0BAAAA,CAAcxE,MAAAA;AACjB,KAAA,CAAA;OACGgC,UAAAA,GAAa;AAAC,MAAA,cAAA;AAAgBA,MAAAA;QAAc,EAAA;AAChDnB,IAAAA,QAAAA;AACGuD,IAAAA,GAAAA;;AAGP,EAAA,MAAMtD,MAAAA,GAAS,MAAM2D,qBAAAA,CACjBtE,OAAAA,CAAQ8D,OAAAA,CAAQ,CAACjE,MAAAA,KACbA,MAAAA,CAAOM,IAAAA,KAAS,SAAA,IAAaN,MAAAA,CAAO0E,MAAAA,GAAS;IAAC1E,MAAAA,CAAO0C;MAAQ,EAAE,GAEnE,YAAA;AACI,IAAA,MAAMiC,KAAAA,GAAQ,CAAA,aAAA,EAAMP,SAAAA,CAAU3C,IAAAA,CAAK,GAAA,CAAA,CAAA,CAAA;AACnCP,IAAAA,OAAAA,CAAQ0D,KAAKD,KAAAA,CAAAA;AACb,IAAA,MAAME,MAAAA,GAAS,MAAMtF,IAAAA,CAAAA,OAAAA,EAAW8E,UAAAA,GAAatD,OAAAA,EAAO;AACpDG,IAAAA,OAAAA,CAAQ4D,QAAQH,KAAAA,CAAAA;AAEhB,IAAA,OAAOE,MAAAA;EACX,CAAA,CAAA;AAGJ,EAAA,IAAI/D,OAAOG,QAAAA,EAAU;AACjB,IAAA,MAAM8D,MAAAA,GAASjE,MAAAA,CAAOiE,MAAAA,CAAOrB,IAAAA,EAAI;AACjC,IAAA,MAAM,IAAIrC,KAAAA,CACN,CAAA,2CAAA,EAA8CP,MAAAA,CAAOG,QAAQ,IAAI8D,MAAAA,GAAS;EAAKA,MAAAA,CAAAA,CAAAA,GAAW,EAAA,CAAA,CAAI,CAAA;AAEtG,EAAA;AAEA,EAAA,OAAOjE,MAAAA;AACX;AA7KsBY,oBAAAA,CAAAA,kBAAAA,EAAAA,oBAAAA,CAAAA","file":"BJD6YP5Q.cjs","sourcesContent":["import { uniqBy } from 'es-toolkit';\nimport os from 'node:os';\nimport path from 'node:path';\nimport process from 'node:process';\nimport * as semver from 'semver';\nimport { $, type ProcessOutput } from 'zx';\n\nimport type { EnvironmentVariable, VolumeMapping } from '../config';\nimport type { ChainContext } from '../context';\nimport { findWorkspaceRoot } from '../utils';\nimport { getImageUriForTool, getVolumeName } from '../utils/docker';\nimport { stringifyError } from '../utils/error';\nimport { findToolByName } from '../utils/finder';\nimport { lockMany } from './lock';\nimport { resolveTypeVersions } from './version-resolver';\n\n/**\n * Get the current user's UID and GID for Docker container user matching.\n * This prevents permission issues when containers write to bind-mounted directories.\n * On Windows or when running as root, returns undefined as UID/GID matching is not needed.\n */\nconst getHostUserIds = (): { uid: number; gid: number } | undefined => {\n    // os.userInfo() returns uid/gid on POSIX systems, -1 on Windows\n    const userInfo = os.userInfo();\n    if (userInfo.uid === -1 || userInfo.gid === -1) {\n        return undefined;\n    }\n\n    return { uid: userInfo.uid, gid: userInfo.gid };\n};\n\n// Configure zx to inherit stdio by default (moved from original setup)\n$.verbose = true;\n$.stdio = ['inherit', 'pipe', process.stderr];\n\n/**\n * Merge default volumes with user-specified volumes\n * User volumes take precedence when containerPath conflicts\n */\nconst mergeVolumes = (\n    defaultVolumes: readonly VolumeMapping[],\n    userVolumes: readonly VolumeMapping[],\n): VolumeMapping[] => uniqBy([...userVolumes, ...defaultVolumes], (volume) => volume.containerPath);\n\n/**\n * Resolve host paths in volumes to absolute paths\n * - Paths starting with ~ are resolved to home directory\n * - Relative paths (starting with . or no prefix) are resolved to workspace root\n * - Absolute paths are left unchanged\n */\nconst resolveVolumePaths = (volumes: VolumeMapping[], workspaceRoot: string): VolumeMapping[] =>\n    volumes.map((volume) =>\n        volume.type === 'host'\n            ? {\n                  ...volume,\n                  hostPath: path.resolve(\n                      workspaceRoot,\n                      volume.hostPath.replace(/^~/, os.homedir()),\n                  ),\n              }\n            : volume,\n    );\n\nconst ensureDockerImage = async (imageUri: string): Promise<void> => {\n    let output: ProcessOutput;\n\n    try {\n        // Check local images first.\n        //\n        // NOTE: `docker image ls <ref>` prints repository/tag in separate columns, so\n        // `stdout.includes(<full-ref>)` is not reliable. Use `inspect` instead: exitCode=0\n        // means the image exists locally.\n        // Keep output minimal to avoid dumping full inspect JSON into CI logs.\n        //\n        // NOTE: Using `.quiet()` to avoid stderr being captured in the CI logs. If the image\n        // is not in the cache, the process prints \"Error response from daemon: No such image: ...\"\n        // which can confuse the uninitiated. It's just a cache miss, not an error.\n        output = await $`docker image inspect --format {{.Id}} ${imageUri}`.nothrow().quiet();\n        if (!output.exitCode) {\n            console.info(`✅ Using cached Docker image: ${imageUri}`);\n            return;\n        }\n\n        console.info('📥 Pulling Docker image from:', imageUri);\n        output = await $`docker pull ${imageUri}`.nothrow();\n    } catch (error: unknown) {\n        throw new Error(`Failed to pull Docker image ${imageUri}: ${stringifyError(error)}`);\n    }\n\n    if (output.exitCode) {\n        const stderr = output.stderr ?? '';\n        const isAuthError =\n            stderr.includes('authorization token has expired') ||\n            stderr.includes('denied') ||\n            stderr.includes('pull access denied');\n\n        throw new Error(\n            [\n                'Docker image not available:',\n                `  - Image: ${imageUri} (pull failed)`,\n                isAuthError\n                    ? '  - ECR auth expired. Run: pnpm localnet login'\n                    : '  - Check if the image tag exists in image registry.',\n            ].join('\\n'),\n        );\n    }\n\n    console.info(`✅ Successfully pulled: ${imageUri}`);\n};\n\nexport interface ToolCommandExecutionOptions {\n    cwd: string;\n    volumes: readonly VolumeMapping[];\n    customEntrypoint?: string;\n    env: EnvironmentVariable[];\n    args?: string[];\n    script?: string;\n    publish?: string[];\n    versions?: Record<string, string>;\n}\n\n/**\n * Enhanced tool command execution using the new version compatibility matrix system\n */\nexport async function executeToolCommand<TImageId extends string>(\n    context: ChainContext<TImageId>,\n    toolName: string,\n    args: string[],\n    {\n        cwd,\n        volumes: userVolumes,\n        customEntrypoint: entrypoint,\n        env: customEnvVars,\n        script,\n        publish,\n        versions = {},\n    }: ToolCommandExecutionOptions,\n): Promise<ProcessOutput> {\n    const tool = findToolByName(context, toolName);\n\n    // Run pre-execution hook if defined (e.g., toolchain sync)\n    if (tool.preExecute) {\n        await tool.preExecute(context, {\n            cwd,\n            args,\n            volumes: userVolumes,\n            env: customEnvVars,\n            script,\n            publish,\n            versions,\n        });\n    }\n\n    // Merge default volumes with user-specified volumes\n    const defaultVolumes = tool.defaultVolumes ?? [];\n    const volumes = mergeVolumes(defaultVolumes, userVolumes);\n\n    if (defaultVolumes.length > 0) {\n        console.info(`📦 Using ${defaultVolumes.length} default cache volume(s) for ${tool.name}`);\n        if (userVolumes.length > 0) {\n            const overrides = userVolumes.filter((uv) =>\n                defaultVolumes.some((dv) => dv.containerPath === uv.containerPath),\n            );\n            if (overrides.length > 0) {\n                console.info(`🔧 User volumes override ${overrides.length} default volume(s)`);\n            }\n        }\n    }\n\n    // Get the resolved version for the current tool.\n    const resolvedVersion = resolveTypeVersions(context, versions)[tool.name];\n\n    if (!resolvedVersion) {\n        throw new Error(`No version resolved for tool ${tool.name}`);\n    }\n\n    console.info(`🔧 ${tool.name} version: ${resolvedVersion}`);\n\n    // Check secondary version validation if available\n    if (tool.getSecondaryVersion) {\n        try {\n            const secondaryVersion = await tool.getSecondaryVersion({ cwd });\n\n            if (!semver.satisfies(secondaryVersion, resolvedVersion)) {\n                console.warn(\n                    `Warning: Local configuration version (${secondaryVersion}) differs from resolved version (${resolvedVersion})`,\n                );\n            }\n        } catch (error) {\n            // Secondary version check failed, but continue with resolved version\n            console.warn('Could not validate secondary version:', stringifyError(error));\n        }\n    }\n\n    // Use Docker image with merged volumes\n    const imageUri = await getImageUriForTool(context, tool.name, resolvedVersion);\n    const workspaceRoot = await findWorkspaceRoot(cwd);\n    const relativePath = path.relative(workspaceRoot, cwd);\n\n    await ensureDockerImage(imageUri);\n\n    if (entrypoint?.trim()) {\n        console.info(`🔧 Using custom entrypoint: ${entrypoint}`);\n    }\n\n    // Merge default env vars with custom env vars (custom takes precedence)\n    const defaultEnv = tool.defaultEnv ?? [];\n\n    // Check if Docker socket is mounted (for tools that spawn Docker containers like anchor --verifiable)\n    // If so, inject HOST_CWD and HOST_WORKSPACE_ROOT so the inner container knows the host paths\n    const hasDockerSocketMount = volumes.some(\n        (v) => v.type === 'host' && v.containerPath === '/var/run/docker.sock',\n    );\n    const dockerSocketEnv: EnvironmentVariable[] = hasDockerSocketMount\n        ? [\n              { name: 'HOST_CWD', value: cwd },\n              { name: 'HOST_WORKSPACE_ROOT', value: workspaceRoot },\n          ]\n        : [];\n\n    const envArgs = uniqBy(\n        [...customEnvVars, ...dockerSocketEnv, ...defaultEnv],\n        ({ name }) => name,\n    ).flatMap(({ name, value }) => ['-e', `${name}=${value}`]);\n\n    // Add host user UID/GID for permission matching on Linux/macOS\n    // This prevents artifacts created in containers from having root ownership\n    // Currently only used for stellar which has an entrypoint that handles UID/GID\n    const hostUserIds = getHostUserIds();\n    const userIdEnvArgs = hostUserIds\n        ? ['-e', `LOCAL_UID=${hostUserIds.uid}`, '-e', `LOCAL_GID=${hostUserIds.gid}`]\n        : [];\n\n    console.info(`👤 Running container as UID:GID ${hostUserIds?.uid}:${hostUserIds?.gid}`);\n\n    if (defaultEnv.length > 0) {\n        console.info(\n            `🌍 Using ${defaultEnv.length} default environment variable(s) for ${tool.name}`,\n        );\n    }\n    if (customEnvVars.length > 0) {\n        console.info(`🌍 Using ${customEnvVars.length} custom environment variable(s)`);\n    }\n\n    // Handle custom script execution\n    let finalArgs: string[];\n    if (script && script.trim() !== '') {\n        console.info(`📜 Executing custom script: ${script}`);\n        finalArgs = ['bash', '-c', script];\n    } else {\n        finalArgs = entrypoint === undefined ? [tool.name, ...args] : args;\n    }\n\n    // Build the Docker command with proper argument separation\n    const dockerArgs = [\n        'run',\n        ...(tool.privileged ? ['--privileged'] : []),\n        '--rm',\n        '--add-host=host.docker.internal:host-gateway',\n        ...envArgs,\n        ...userIdEnvArgs,\n        '-v',\n        `${workspaceRoot}:/workspace`,\n        '-w',\n        `/workspace/${relativePath}`,\n        ...(publish ?? []).flatMap((p) => ['-p', p.trim()]),\n        ...resolveVolumePaths(volumes, workspaceRoot).flatMap((volume) => [\n            '-v',\n            getVolumeName(volume),\n        ]),\n        ...(entrypoint ? ['--entrypoint', entrypoint] : []),\n        imageUri,\n        ...finalArgs,\n    ];\n\n    const output = await lockMany(\n        volumes.flatMap((volume) =>\n            volume.type === 'isolate' && volume.locked ? [volume.name] : [],\n        ),\n        async () => {\n            const label = `⏱️ ${finalArgs.join(' ')}`;\n            console.time(label);\n            const result = await $`docker ${dockerArgs}`.nothrow();\n            console.timeEnd(label);\n\n            return result;\n        },\n    );\n\n    if (output.exitCode) {\n        const stdout = output.stdout.trim();\n        throw new Error(\n            `Failed to run Docker container (exit code: ${output.exitCode})${stdout ? `\\n${stdout}` : ''}`,\n        );\n    }\n\n    return output;\n}\n"]}

package/dist/ECZCFJB4.js

@@ -0,0 +1,66 @@
+import { getImageTag, getImageUri } from './ERBSYZRH.js';
+import { init_esm_shims, __name } from './6AHA7PAZ.js';
+import { execFile } from 'child_process';
+import { promisify } from 'util';
+
+// src/test.ts
+init_esm_shims();
+var COMMAND_TIMEOUT = 5 * 6e4;
+var PULL_TIMEOUT = 10 * 6e4;
+var VERSION_TEST_TIMEOUT = 15 * 6e4;
+var runCommand = /* @__PURE__ */ __name(async (command, args, timeout = COMMAND_TIMEOUT) => (await promisify(execFile)(command, args, {
+  timeout,
+  killSignal: "SIGKILL"
+})).stdout.trim(), "runCommand");
+var ensureDockerImageExists = /* @__PURE__ */ __name(async (imageUri) => {
+  await runCommand("docker", [
+    "run",
+    "--rm",
+    "--entrypoint",
+    "true",
+    imageUri
+  ], PULL_TIMEOUT);
+}, "ensureDockerImageExists");
+var testTools = /* @__PURE__ */ __name(({ describe, expect, it, beforeAll }, images, _versionCombinations, versionCommands) => {
+  describe("Docker image IDs", () => {
+    for (const [name, image] of Object.entries(images)) {
+      it(`has an image ID of ${name}`, () => {
+        expect([
+          image.name,
+          getImageTag(image, "-")
+        ].join(":")).toBe(name);
+      });
+    }
+  });
+  describe("Tool versions", () => {
+    for (const literalImage of Object.values(images)) {
+      const image = literalImage;
+      describe(getImageTag(image), () => {
+        let imageUri;
+        beforeAll(async () => {
+          imageUri = await getImageUri(image, "_");
+          await ensureDockerImageExists(imageUri);
+        }, PULL_TIMEOUT);
+        for (const [tool, expectedVersion] of Object.entries(image.versions)) {
+          it(`should have ${tool} of version ${expectedVersion}`, async () => {
+            if (!(versionCommands[tool] instanceof Array)) {
+              throw new Error("Missing version command");
+            }
+            const version = await runCommand("docker", [
+              "run",
+              "--rm",
+              "--privileged",
+              imageUri,
+              ...versionCommands[tool]
+            ]);
+            expect(version).toContain(expectedVersion);
+          }, VERSION_TEST_TIMEOUT);
+        }
+      });
+    }
+  });
+}, "testTools");
+
+export { testTools };
+//# sourceMappingURL=ECZCFJB4.js.map
+//# sourceMappingURL=ECZCFJB4.js.map

package/dist/ECZCFJB4.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/test.ts"],"names":["COMMAND_TIMEOUT","PULL_TIMEOUT","VERSION_TEST_TIMEOUT","runCommand","command","args","timeout","promisify","execFile","killSignal","stdout","trim","ensureDockerImageExists","imageUri","testTools","describe","expect","it","beforeAll","images","_versionCombinations","versionCommands","name","image","Object","entries","getImageTag","join","toBe","literalImage","values","getImageUri","tool","expectedVersion","versions","Array","Error","version","toContain"],"mappings":";;;;;;AAAA,cAAA,EAAA;AAQA,IAAMA,kBAAkB,CAAA,GAAI,GAAA;AAC5B,IAAMC,eAAe,EAAA,GAAK,GAAA;AAC1B,IAAMC,uBAAuB,EAAA,GAAK,GAAA;AAElC,IAAMC,UAAAA,mBAAa,MAAA,CAAA,OACfC,OAAAA,EACAC,IAAAA,EACAC,OAAAA,GAAUN,eAAAA,KAAAA,CAGN,MAAMO,SAAAA,CAAUC,QAAAA,CAAAA,CAAUJ,OAAAA,EAASC,IAAAA,EAAM;AACrCC,EAAAA,OAAAA;EACAG,UAAAA,EAAY;AAChB,CAAA,CAAA,EACFC,MAAAA,CAAOC,IAAAA,EAAI,EAVE,YAAA,CAAA;AAanB,IAAMC,uBAAAA,iCAAiCC,QAAAA,KAAAA;AACnC,EAAA,MAAMV,WAAW,QAAA,EAAU;AAAC,IAAA,KAAA;AAAO,IAAA,MAAA;AAAQ,IAAA,cAAA;AAAgB,IAAA,MAAA;AAAQU,IAAAA;KAAWZ,YAAAA,CAAAA;AAClF,CAAA,EAFgC,yBAAA,CAAA;AAIzB,IAAMa,SAAAA,mBAAY,MAAA,CAAA,CACrB,EAAEC,QAAAA,EAAUC,MAAAA,EAAQC,IAAIC,SAAAA,EAAS,EACjCC,MAAAA,EACAC,oBAAAA,EACAC,eAAAA,KAAAA;AAEAN,EAAAA,QAAAA,CAAS,oBAAoB,MAAA;AACzB,IAAA,KAAA,MAAW,CAACO,IAAAA,EAAMC,KAAAA,KAAUC,MAAAA,CAAOC,OAAAA,CAAQN,MAAAA,CAAAA,EAAS;AAChDF,MAAAA,EAAAA,CAAG,CAAA,mBAAA,EAAsBK,IAAAA,CAAAA,CAAAA,EAAQ,MAAA;AAC7BN,QAAAA,MAAAA,CAAO;UAACO,KAAAA,CAAMD,IAAAA;AAAMI,UAAAA,WAAAA,CAAYH,OAAO,GAAA;AAAMI,SAAAA,CAAAA,IAAAA,CAAK,GAAA,CAAA,CAAA,CAAMC,IAAAA,CAAKN,IAAAA,CAAAA;MACjE,CAAA,CAAA;AACJ,IAAA;EACJ,CAAA,CAAA;AAEAP,EAAAA,QAAAA,CAAS,iBAAiB,MAAA;AACtB,IAAA,KAAA,MAAWc,YAAAA,IAAgBL,MAAAA,CAAOM,MAAAA,CAAOX,MAAAA,CAAAA,EAAS;AAC9C,MAAA,MAAMI,KAAAA,GAAeM,YAAAA;AAErBd,MAAAA,QAAAA,CAASW,WAAAA,CAAYH,KAAAA,CAAAA,EAAQ,MAAA;AACzB,QAAA,IAAIV,QAAAA;AAEJK,QAAAA,SAAAA,CAAU,YAAA;AACNL,UAAAA,QAAAA,GAAW,MAAMkB,WAAAA,CAAYR,KAAAA,EAAO,GAAA,CAAA;AACpC,UAAA,MAAMX,wBAAwBC,QAAAA,CAAAA;AAClC,QAAA,CAAA,EAAGZ,YAAAA,CAAAA;AAEH,QAAA,KAAA,MAAW,CAAC+B,MAAMC,eAAAA,CAAAA,IAAoBT,OAAOC,OAAAA,CAAQF,KAAAA,CAAMW,QAAQ,CAAA,EAAG;AAClEjB,UAAAA,EAAAA,CACI,CAAA,YAAA,EAAee,IAAAA,CAAAA,YAAAA,EAAmBC,eAAAA,IAClC,YAAA;AACI,YAAA,IAAI,EAAEZ,eAAAA,CAAgBW,IAAAA,CAAAA,YAAiBG,KAAAA,CAAAA,EAAQ;AAC3C,cAAA,MAAM,IAAIC,MAAM,yBAAA,CAAA;AACpB,YAAA;AAEA,YAAA,MAAMC,OAAAA,GAAU,MAAMlC,UAAAA,CAAW,QAAA,EAAU;AACvC,cAAA,KAAA;AACA,cAAA,MAAA;AACA,cAAA,cAAA;AACAU,cAAAA,QAAAA;AACGQ,cAAAA,GAAAA,eAAAA,CAAgBW,IAAAA;AACtB,aAAA,CAAA;AAEDhB,YAAAA,MAAAA,CAAOqB,OAAAA,CAAAA,CAASC,SAAAA,CAAUL,eAAAA,CAAAA;AAC9B,UAAA,CAAA,EACA/B,oBAAAA,CAAAA;AAER,QAAA;MACJ,CAAA,CAAA;AACJ,IAAA;EACJ,CAAA,CAAA;AACJ,CAAA,EAlDyB,WAAA","file":"ECZCFJB4.js","sourcesContent":["import { execFile } from 'node:child_process';\nimport { promisify } from 'node:util';\nimport type * as vitest from 'vitest';\n\nimport type { VersionCombination } from './config';\nimport { type Image } from './config';\nimport { getImageTag, getImageUri } from './utils/docker';\n\nconst COMMAND_TIMEOUT = 5 * 60_000;\nconst PULL_TIMEOUT = 10 * 60_000;\nconst VERSION_TEST_TIMEOUT = 15 * 60_000;\n\nconst runCommand = async (\n    command: string,\n    args: string[],\n    timeout = COMMAND_TIMEOUT,\n): Promise<string> =>\n    (\n        await promisify(execFile)(command, args, {\n            timeout,\n            killSignal: 'SIGKILL', // Force kill if timeout\n        })\n    ).stdout.trim();\n\n/** Run a no-op command in the image to trigger a pull if it's not available locally. */\nconst ensureDockerImageExists = async (imageUri: string): Promise<void> => {\n    await runCommand('docker', ['run', '--rm', '--entrypoint', 'true', imageUri], PULL_TIMEOUT);\n};\n\nexport const testTools = (\n    { describe, expect, it, beforeAll }: typeof vitest,\n    images: Record<string, Image>,\n    _versionCombinations: VersionCombination<string>[],\n    versionCommands: Record<string, string[]>,\n): void => {\n    describe('Docker image IDs', () => {\n        for (const [name, image] of Object.entries(images)) {\n            it(`has an image ID of ${name}`, () => {\n                expect([image.name, getImageTag(image, '-')].join(':')).toBe(name);\n            });\n        }\n    });\n\n    describe('Tool versions', () => {\n        for (const literalImage of Object.values(images)) {\n            const image: Image = literalImage;\n\n            describe(getImageTag(image), () => {\n                let imageUri: string;\n\n                beforeAll(async () => {\n                    imageUri = await getImageUri(image, '_');\n                    await ensureDockerImageExists(imageUri);\n                }, PULL_TIMEOUT);\n\n                for (const [tool, expectedVersion] of Object.entries(image.versions)) {\n                    it(\n                        `should have ${tool} of version ${expectedVersion}`,\n                        async () => {\n                            if (!(versionCommands[tool] instanceof Array)) {\n                                throw new Error('Missing version command');\n                            }\n\n                            const version = await runCommand('docker', [\n                                'run',\n                                '--rm',\n                                '--privileged',\n                                imageUri,\n                                ...versionCommands[tool],\n                            ]);\n\n                            expect(version).toContain(expectedVersion);\n                        },\n                        VERSION_TEST_TIMEOUT,\n                    );\n                }\n            });\n        }\n    });\n};\n"]}

package/dist/{GPDDKHCR.js → ERBSYZRH.js}

@@ -1,4 +1,4 @@
-import { getRegistry, getImageDirectory } from './46I6PSJ7.js';
+import { getRegistry, getImageDirectory } from './X4R3PN6F.js';
 import { findToolVersionsForCombination, getImageName } from './KWRJPB5T.js';
 import { init_esm_shims, __name } from './6AHA7PAZ.js';
 import { join, basename } from 'path';
@@ -48,5 +48,5 @@ var getVolumeName = /* @__PURE__ */ __name((volume) => {
 }, "getVolumeName");
 
 export { getImageTag, getImageUri, getImageUriForTool, getVolumeName };
-//# sourceMappingURL=GPDDKHCR.js.map
-//# sourceMappingURL=GPDDKHCR.js.map
+//# sourceMappingURL=ERBSYZRH.js.map
+//# sourceMappingURL=ERBSYZRH.js.map

package/dist/{GPDDKHCR.js.map → ERBSYZRH.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/utils/docker.ts"],"names":["getImageUriForTool","context","toolName","version","separator","image","versionCombinations","flatMap","combination","imageId","images","findToolVersionsForCombination","Error","getImageUri","join","getRegistry","getImageDirectory","getImageName","name","getImageTag","versions","patch","Object","entries","sort","flat","getVolumeName","volume","type","hostPath","containerPath","components","shared","packageName","process","env","npm_package_name","push","basename"],"mappings":";;;;;;AAAA,cAAA,EAAA;AAOO,IAAMA,qCAAqB,MAAA,CAAA,OAC9BC,OAAAA,EACAC,QAAAA,EACAC,OAAAA,EACAC,YAAuB,GAAA,KAAG;AAE1B,EAAA,MAAM,CAACC,KAAAA,CAAAA,GAASJ,QAAQK,mBAAAA,CAAoBC,OAAAA,CAAQ,CAACC,WAAAA,KAAAA;AACjD,IAAA,MAAMC,OAAAA,GAAUD,WAAAA,CAAYE,MAAAA,CAAOR,QAAAA,CAAAA;AAEnC,IAAA,IAAI,CAACO,OAAAA,EAAS;AACV,MAAA,OAAO,EAAA;AACX,IAAA;AAEA,IAAA,MAAMJ,MAAAA,GAAQJ,OAAAA,CAAQS,MAAAA,CAAOD,OAAAA,CAAAA;AAE7B,IAAA,OAAOJ,UAASM,8BAAAA,CAA+BV,OAAAA,EAASO,WAAAA,CAAAA,CAAaN,QAAAA,MAAcC,OAAAA,GAC7E;AAACE,MAAAA;QACD,EAAA;EACV,CAAA,CAAA;AAEA,EAAA,IAAI,CAACA,KAAAA,EAAO;AACR,IAAA,MAAM,IAAIO,KAAAA,CACN,CAAA,sCAAA,EAAyCV,QAAAA,CAAAA,cAAAA,EAAyBC,OAAAA,CAAAA,CAAS,CAAA;AAEnF,EAAA;AAEA,EAAA,OAAOU,WAAAA,CAAYR,OAAOD,SAAAA,CAAAA;AAC9B,CAAA,EA3BkC,oBAAA;AA6B3B,IAAMS,WAAAA,iCAAqBR,KAAAA,EAAcD,SAAAA,GAAuB,QACnEU,IAAAA,CACI,MAAMC,WAAAA,EAAAA,EACN,MAAMC,iBAAAA,IACN,CAAA,EAAGC,YAAAA,CAAaZ,KAAAA,CAAMa,IAAI,CAAA,CAAA,CAAA,EAAKC,YAAYd,KAAAA,EAAOD,SAAAA,CAAAA,CAAAA,CAAY,CAAA,EAJ3C,aAAA;AAOpB,IAAMe,8BAAc,MAAA,CAAA,CAAC,EAAEC,UAAUC,KAAAA,EAAK,EAAWjB,YAAuB,GAAA,KAC3E;AAAIkB,EAAAA,GAAAA,MAAAA,CAAOC,OAAAA,CAAQH,QAAAA,CAAAA,CAAUI,IAAAA,GAAOC,IAAAA,EAAI;KAAQJ,KAAAA,GAAQ;AAAC,IAAA,OAAA;AAASA,IAAAA;MAAS;AAAKP,CAAAA,CAAAA,IAAAA,CAAKV,SAAAA,CAAAA,EAD9D,aAAA;AAIpB,IAAMsB,aAAAA,2BAAiBC,MAAAA,KAAAA;AAC1B,EAAA,IAAIA,MAAAA,CAAOC,SAAS,MAAA,EAAQ;AACxB,IAAA,OAAO,CAAA,EAAGD,MAAAA,CAAOE,QAAQ,CAAA,CAAA,EAAIF,OAAOG,aAAa,CAAA,CAAA;AACrD,EAAA;AAEA,EAAA,MAAMC,UAAAA,GAAa;AAAC,IAAA,kBAAA;IAAoBJ,MAAAA,CAAOT;;AAE/C,EAAA,IAAI,CAACS,OAAOK,MAAAA,EAAQ;AAGhB,IAAA,MAAMC,WAAAA,GAAcC,QAAQC,GAAAA,CAAIC,gBAAAA;AAEhC,IAAA,IAAI,CAACH,WAAAA,EAAa;AACd,MAAA,MAAM,IAAIrB,MAAM,mDAAA,CAAA;AACpB,IAAA;AAEAmB,IAAAA,UAAAA,CAAWM,IAAAA,CAAKC,QAAAA,CAASL,WAAAA,CAAAA,CAAAA;AAC7B,EAAA;AAEA,EAAA,OAAO,GAAGF,UAAAA,CAAWjB,IAAAA,CAAK,GAAA,CAAA,CAAA,CAAA,EAAQa,OAAOG,aAAa,CAAA,CAAA;AAC1D,CAAA,EApB6B,eAAA","file":"GPDDKHCR.js","sourcesContent":["import { basename, join } from 'node:path';\n\nimport type { Image, VolumeMapping } from '../config';\nimport { getImageDirectory, getRegistry } from '../config';\nimport type { ChainContext } from '../context';\nimport { findToolVersionsForCombination, getImageName } from './finder';\n\nexport const getImageUriForTool = async <TImageId extends string>(\n    context: ChainContext<TImageId>,\n    toolName: string,\n    version: string,\n    separator: '_' | '-' = '_',\n): Promise<string> => {\n    const [image] = context.versionCombinations.flatMap((combination) => {\n        const imageId = combination.images[toolName];\n\n        if (!imageId) {\n            return [];\n        }\n\n        const image = context.images[imageId];\n\n        return image && findToolVersionsForCombination(context, combination)[toolName] === version\n            ? [image]\n            : [];\n    });\n\n    if (!image) {\n        throw new Error(\n            `No version combination found for tool ${toolName} with version ${version}`,\n        );\n    }\n\n    return getImageUri(image, separator);\n};\n\nexport const getImageUri = async (image: Image, separator: '_' | '-' = '_'): Promise<string> =>\n    join(\n        await getRegistry(),\n        await getImageDirectory(),\n        `${getImageName(image.name)}:${getImageTag(image, separator)}`,\n    );\n\nexport const getImageTag = ({ versions, patch }: Image, separator: '_' | '-' = '_'): string =>\n    [...Object.entries(versions).sort().flat(), ...(patch ? ['patch', patch] : [])].join(separator);\n\n// passing workspaceRoot is necessary for host volumes to resolve relative paths to the workspace root\nexport const getVolumeName = (volume: VolumeMapping): string => {\n    if (volume.type === 'host') {\n        return `${volume.hostPath}:${volume.containerPath}`;\n    }\n\n    const components = ['lz-tooling-cache', volume.name];\n\n    if (!volume.shared) {\n        // This is the package name where the `lz-tool` command is executed.\n        // eslint-disable-next-line turbo/no-undeclared-env-vars\n        const packageName = process.env.npm_package_name;\n\n        if (!packageName) {\n            throw new Error('npm_package_name environment variable not defined');\n        }\n\n        components.push(basename(packageName));\n    }\n\n    return `${components.join('-')}:${volume.containerPath}`;\n};\n"]}
+{"version":3,"sources":["../src/utils/docker.ts"],"names":["getImageUriForTool","context","toolName","version","separator","image","versionCombinations","flatMap","combination","imageId","images","findToolVersionsForCombination","Error","getImageUri","join","getRegistry","getImageDirectory","getImageName","name","getImageTag","versions","patch","Object","entries","sort","flat","getVolumeName","volume","type","hostPath","containerPath","components","shared","packageName","process","env","npm_package_name","push","basename"],"mappings":";;;;;;AAAA,cAAA,EAAA;AAOO,IAAMA,qCAAqB,MAAA,CAAA,OAC9BC,OAAAA,EACAC,QAAAA,EACAC,OAAAA,EACAC,YAAuB,GAAA,KAAG;AAE1B,EAAA,MAAM,CAACC,KAAAA,CAAAA,GAASJ,QAAQK,mBAAAA,CAAoBC,OAAAA,CAAQ,CAACC,WAAAA,KAAAA;AACjD,IAAA,MAAMC,OAAAA,GAAUD,WAAAA,CAAYE,MAAAA,CAAOR,QAAAA,CAAAA;AAEnC,IAAA,IAAI,CAACO,OAAAA,EAAS;AACV,MAAA,OAAO,EAAA;AACX,IAAA;AAEA,IAAA,MAAMJ,MAAAA,GAAQJ,OAAAA,CAAQS,MAAAA,CAAOD,OAAAA,CAAAA;AAE7B,IAAA,OAAOJ,UAASM,8BAAAA,CAA+BV,OAAAA,EAASO,WAAAA,CAAAA,CAAaN,QAAAA,MAAcC,OAAAA,GAC7E;AAACE,MAAAA;QACD,EAAA;EACV,CAAA,CAAA;AAEA,EAAA,IAAI,CAACA,KAAAA,EAAO;AACR,IAAA,MAAM,IAAIO,KAAAA,CACN,CAAA,sCAAA,EAAyCV,QAAAA,CAAAA,cAAAA,EAAyBC,OAAAA,CAAAA,CAAS,CAAA;AAEnF,EAAA;AAEA,EAAA,OAAOU,WAAAA,CAAYR,OAAOD,SAAAA,CAAAA;AAC9B,CAAA,EA3BkC,oBAAA;AA6B3B,IAAMS,WAAAA,iCAAqBR,KAAAA,EAAcD,SAAAA,GAAuB,QACnEU,IAAAA,CACI,MAAMC,WAAAA,EAAAA,EACN,MAAMC,iBAAAA,IACN,CAAA,EAAGC,YAAAA,CAAaZ,KAAAA,CAAMa,IAAI,CAAA,CAAA,CAAA,EAAKC,YAAYd,KAAAA,EAAOD,SAAAA,CAAAA,CAAAA,CAAY,CAAA,EAJ3C,aAAA;AAOpB,IAAMe,8BAAc,MAAA,CAAA,CAAC,EAAEC,UAAUC,KAAAA,EAAK,EAAWjB,YAAuB,GAAA,KAC3E;AAAIkB,EAAAA,GAAAA,MAAAA,CAAOC,OAAAA,CAAQH,QAAAA,CAAAA,CAAUI,IAAAA,GAAOC,IAAAA,EAAI;KAAQJ,KAAAA,GAAQ;AAAC,IAAA,OAAA;AAASA,IAAAA;MAAS;AAAKP,CAAAA,CAAAA,IAAAA,CAAKV,SAAAA,CAAAA,EAD9D,aAAA;AAIpB,IAAMsB,aAAAA,2BAAiBC,MAAAA,KAAAA;AAC1B,EAAA,IAAIA,MAAAA,CAAOC,SAAS,MAAA,EAAQ;AACxB,IAAA,OAAO,CAAA,EAAGD,MAAAA,CAAOE,QAAQ,CAAA,CAAA,EAAIF,OAAOG,aAAa,CAAA,CAAA;AACrD,EAAA;AAEA,EAAA,MAAMC,UAAAA,GAAa;AAAC,IAAA,kBAAA;IAAoBJ,MAAAA,CAAOT;;AAE/C,EAAA,IAAI,CAACS,OAAOK,MAAAA,EAAQ;AAGhB,IAAA,MAAMC,WAAAA,GAAcC,QAAQC,GAAAA,CAAIC,gBAAAA;AAEhC,IAAA,IAAI,CAACH,WAAAA,EAAa;AACd,MAAA,MAAM,IAAIrB,MAAM,mDAAA,CAAA;AACpB,IAAA;AAEAmB,IAAAA,UAAAA,CAAWM,IAAAA,CAAKC,QAAAA,CAASL,WAAAA,CAAAA,CAAAA;AAC7B,EAAA;AAEA,EAAA,OAAO,GAAGF,UAAAA,CAAWjB,IAAAA,CAAK,GAAA,CAAA,CAAA,CAAA,EAAQa,OAAOG,aAAa,CAAA,CAAA;AAC1D,CAAA,EApB6B,eAAA","file":"ERBSYZRH.js","sourcesContent":["import { basename, join } from 'node:path';\n\nimport type { Image, VolumeMapping } from '../config';\nimport { getImageDirectory, getRegistry } from '../config';\nimport type { ChainContext } from '../context';\nimport { findToolVersionsForCombination, getImageName } from './finder';\n\nexport const getImageUriForTool = async <TImageId extends string>(\n    context: ChainContext<TImageId>,\n    toolName: string,\n    version: string,\n    separator: '_' | '-' = '_',\n): Promise<string> => {\n    const [image] = context.versionCombinations.flatMap((combination) => {\n        const imageId = combination.images[toolName];\n\n        if (!imageId) {\n            return [];\n        }\n\n        const image = context.images[imageId];\n\n        return image && findToolVersionsForCombination(context, combination)[toolName] === version\n            ? [image]\n            : [];\n    });\n\n    if (!image) {\n        throw new Error(\n            `No version combination found for tool ${toolName} with version ${version}`,\n        );\n    }\n\n    return getImageUri(image, separator);\n};\n\nexport const getImageUri = async (image: Image, separator: '_' | '-' = '_'): Promise<string> =>\n    join(\n        await getRegistry(),\n        await getImageDirectory(),\n        `${getImageName(image.name)}:${getImageTag(image, separator)}`,\n    );\n\nexport const getImageTag = ({ versions, patch }: Image, separator: '_' | '-' = '_'): string =>\n    [...Object.entries(versions).sort().flat(), ...(patch ? ['patch', patch] : [])].join(separator);\n\n// passing workspaceRoot is necessary for host volumes to resolve relative paths to the workspace root\nexport const getVolumeName = (volume: VolumeMapping): string => {\n    if (volume.type === 'host') {\n        return `${volume.hostPath}:${volume.containerPath}`;\n    }\n\n    const components = ['lz-tooling-cache', volume.name];\n\n    if (!volume.shared) {\n        // This is the package name where the `lz-tool` command is executed.\n        // eslint-disable-next-line turbo/no-undeclared-env-vars\n        const packageName = process.env.npm_package_name;\n\n        if (!packageName) {\n            throw new Error('npm_package_name environment variable not defined');\n        }\n\n        components.push(basename(packageName));\n    }\n\n    return `${components.join('-')}:${volume.containerPath}`;\n};\n"]}

package/dist/{533SFXIE.cjs → HSCHZUOV.cjs}

@@ -1,6 +1,6 @@
 'use strict';
 
-var _2NTYK3VO_cjs = require('./2NTYK3VO.cjs');
+var _7PWQZJWC_cjs = require('./7PWQZJWC.cjs');
 var _5GPMTH2I_cjs = require('./5GPMTH2I.cjs');
 var _24WEKBY3_cjs = require('./24WEKBY3.cjs');
 var path = require('path');
@@ -23,7 +23,7 @@ var getImageUriForTool = /* @__PURE__ */ _24WEKBY3_cjs.__name(async (context, to
   }
   return getImageUri(image, separator);
 }, "getImageUriForTool");
-var getImageUri = /* @__PURE__ */ _24WEKBY3_cjs.__name(async (image, separator = "_") => path.join(await _2NTYK3VO_cjs.getRegistry(), await _2NTYK3VO_cjs.getImageDirectory(), `${_5GPMTH2I_cjs.getImageName(image.name)}:${getImageTag(image, separator)}`), "getImageUri");
+var getImageUri = /* @__PURE__ */ _24WEKBY3_cjs.__name(async (image, separator = "_") => path.join(await _7PWQZJWC_cjs.getRegistry(), await _7PWQZJWC_cjs.getImageDirectory(), `${_5GPMTH2I_cjs.getImageName(image.name)}:${getImageTag(image, separator)}`), "getImageUri");
 var getImageTag = /* @__PURE__ */ _24WEKBY3_cjs.__name(({ versions, patch }, separator = "_") => [
   ...Object.entries(versions).sort().flat(),
   ...patch ? [
@@ -53,5 +53,5 @@ exports.getImageTag = getImageTag;
 exports.getImageUri = getImageUri;
 exports.getImageUriForTool = getImageUriForTool;
 exports.getVolumeName = getVolumeName;
-//# sourceMappingURL=533SFXIE.cjs.map
-//# sourceMappingURL=533SFXIE.cjs.map
+//# sourceMappingURL=HSCHZUOV.cjs.map
+//# sourceMappingURL=HSCHZUOV.cjs.map

package/dist/{533SFXIE.cjs.map → HSCHZUOV.cjs.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/utils/docker.ts"],"names":["init_cjs_shims","getImageUriForTool","__name","context","toolName","version","separator","image","versionCombinations","flatMap","combination","imageId","images","findToolVersionsForCombination","Error","getImageUri","join","getRegistry","getImageDirectory","getImageName","name","getImageTag","versions","patch","Object","entries","sort","flat","getVolumeName","volume","type","hostPath","containerPath","components","shared","packageName","process","env","npm_package_name","push","basename"],"mappings":";;;;;;;;AAAAA,4BAAA,EAAA;AAOO,IAAMC,qCAAqBC,oBAAA,CAAA,OAC9BC,OAAAA,EACAC,QAAAA,EACAC,OAAAA,EACAC,YAAuB,GAAA,KAAG;AAE1B,EAAA,MAAM,CAACC,KAAAA,CAAAA,GAASJ,QAAQK,mBAAAA,CAAoBC,OAAAA,CAAQ,CAACC,WAAAA,KAAAA;AACjD,IAAA,MAAMC,OAAAA,GAAUD,WAAAA,CAAYE,MAAAA,CAAOR,QAAAA,CAAAA;AAEnC,IAAA,IAAI,CAACO,OAAAA,EAAS;AACV,MAAA,OAAO,EAAA;AACX,IAAA;AAEA,IAAA,MAAMJ,MAAAA,GAAQJ,OAAAA,CAAQS,MAAAA,CAAOD,OAAAA,CAAAA;AAE7B,IAAA,OAAOJ,UAASM,4CAAAA,CAA+BV,OAAAA,EAASO,WAAAA,CAAAA,CAAaN,QAAAA,MAAcC,OAAAA,GAC7E;AAACE,MAAAA;QACD,EAAA;EACV,CAAA,CAAA;AAEA,EAAA,IAAI,CAACA,KAAAA,EAAO;AACR,IAAA,MAAM,IAAIO,KAAAA,CACN,CAAA,sCAAA,EAAyCV,QAAAA,CAAAA,cAAAA,EAAyBC,OAAAA,CAAAA,CAAS,CAAA;AAEnF,EAAA;AAEA,EAAA,OAAOU,WAAAA,CAAYR,OAAOD,SAAAA,CAAAA;AAC9B,CAAA,EA3BkC,oBAAA;AA6B3B,IAAMS,WAAAA,+CAAqBR,KAAAA,EAAcD,SAAAA,GAAuB,QACnEU,SAAAA,CACI,MAAMC,yBAAAA,EAAAA,EACN,MAAMC,+BAAAA,IACN,CAAA,EAAGC,0BAAAA,CAAaZ,KAAAA,CAAMa,IAAI,CAAA,CAAA,CAAA,EAAKC,YAAYd,KAAAA,EAAOD,SAAAA,CAAAA,CAAAA,CAAY,CAAA,EAJ3C,aAAA;AAOpB,IAAMe,8BAAcnB,oBAAA,CAAA,CAAC,EAAEoB,UAAUC,KAAAA,EAAK,EAAWjB,YAAuB,GAAA,KAC3E;AAAIkB,EAAAA,GAAAA,MAAAA,CAAOC,OAAAA,CAAQH,QAAAA,CAAAA,CAAUI,IAAAA,GAAOC,IAAAA,EAAI;KAAQJ,KAAAA,GAAQ;AAAC,IAAA,OAAA;AAASA,IAAAA;MAAS;AAAKP,CAAAA,CAAAA,IAAAA,CAAKV,SAAAA,CAAAA,EAD9D,aAAA;AAIpB,IAAMsB,aAAAA,yCAAiBC,MAAAA,KAAAA;AAC1B,EAAA,IAAIA,MAAAA,CAAOC,SAAS,MAAA,EAAQ;AACxB,IAAA,OAAO,CAAA,EAAGD,MAAAA,CAAOE,QAAQ,CAAA,CAAA,EAAIF,OAAOG,aAAa,CAAA,CAAA;AACrD,EAAA;AAEA,EAAA,MAAMC,UAAAA,GAAa;AAAC,IAAA,kBAAA;IAAoBJ,MAAAA,CAAOT;;AAE/C,EAAA,IAAI,CAACS,OAAOK,MAAAA,EAAQ;AAGhB,IAAA,MAAMC,WAAAA,GAAcC,QAAQC,GAAAA,CAAIC,gBAAAA;AAEhC,IAAA,IAAI,CAACH,WAAAA,EAAa;AACd,MAAA,MAAM,IAAIrB,MAAM,mDAAA,CAAA;AACpB,IAAA;AAEAmB,IAAAA,UAAAA,CAAWM,IAAAA,CAAKC,aAAAA,CAASL,WAAAA,CAAAA,CAAAA;AAC7B,EAAA;AAEA,EAAA,OAAO,GAAGF,UAAAA,CAAWjB,IAAAA,CAAK,GAAA,CAAA,CAAA,CAAA,EAAQa,OAAOG,aAAa,CAAA,CAAA;AAC1D,CAAA,EApB6B,eAAA","file":"533SFXIE.cjs","sourcesContent":["import { basename, join } from 'node:path';\n\nimport type { Image, VolumeMapping } from '../config';\nimport { getImageDirectory, getRegistry } from '../config';\nimport type { ChainContext } from '../context';\nimport { findToolVersionsForCombination, getImageName } from './finder';\n\nexport const getImageUriForTool = async <TImageId extends string>(\n    context: ChainContext<TImageId>,\n    toolName: string,\n    version: string,\n    separator: '_' | '-' = '_',\n): Promise<string> => {\n    const [image] = context.versionCombinations.flatMap((combination) => {\n        const imageId = combination.images[toolName];\n\n        if (!imageId) {\n            return [];\n        }\n\n        const image = context.images[imageId];\n\n        return image && findToolVersionsForCombination(context, combination)[toolName] === version\n            ? [image]\n            : [];\n    });\n\n    if (!image) {\n        throw new Error(\n            `No version combination found for tool ${toolName} with version ${version}`,\n        );\n    }\n\n    return getImageUri(image, separator);\n};\n\nexport const getImageUri = async (image: Image, separator: '_' | '-' = '_'): Promise<string> =>\n    join(\n        await getRegistry(),\n        await getImageDirectory(),\n        `${getImageName(image.name)}:${getImageTag(image, separator)}`,\n    );\n\nexport const getImageTag = ({ versions, patch }: Image, separator: '_' | '-' = '_'): string =>\n    [...Object.entries(versions).sort().flat(), ...(patch ? ['patch', patch] : [])].join(separator);\n\n// passing workspaceRoot is necessary for host volumes to resolve relative paths to the workspace root\nexport const getVolumeName = (volume: VolumeMapping): string => {\n    if (volume.type === 'host') {\n        return `${volume.hostPath}:${volume.containerPath}`;\n    }\n\n    const components = ['lz-tooling-cache', volume.name];\n\n    if (!volume.shared) {\n        // This is the package name where the `lz-tool` command is executed.\n        // eslint-disable-next-line turbo/no-undeclared-env-vars\n        const packageName = process.env.npm_package_name;\n\n        if (!packageName) {\n            throw new Error('npm_package_name environment variable not defined');\n        }\n\n        components.push(basename(packageName));\n    }\n\n    return `${components.join('-')}:${volume.containerPath}`;\n};\n"]}
+{"version":3,"sources":["../src/utils/docker.ts"],"names":["init_cjs_shims","getImageUriForTool","__name","context","toolName","version","separator","image","versionCombinations","flatMap","combination","imageId","images","findToolVersionsForCombination","Error","getImageUri","join","getRegistry","getImageDirectory","getImageName","name","getImageTag","versions","patch","Object","entries","sort","flat","getVolumeName","volume","type","hostPath","containerPath","components","shared","packageName","process","env","npm_package_name","push","basename"],"mappings":";;;;;;;;AAAAA,4BAAA,EAAA;AAOO,IAAMC,qCAAqBC,oBAAA,CAAA,OAC9BC,OAAAA,EACAC,QAAAA,EACAC,OAAAA,EACAC,YAAuB,GAAA,KAAG;AAE1B,EAAA,MAAM,CAACC,KAAAA,CAAAA,GAASJ,QAAQK,mBAAAA,CAAoBC,OAAAA,CAAQ,CAACC,WAAAA,KAAAA;AACjD,IAAA,MAAMC,OAAAA,GAAUD,WAAAA,CAAYE,MAAAA,CAAOR,QAAAA,CAAAA;AAEnC,IAAA,IAAI,CAACO,OAAAA,EAAS;AACV,MAAA,OAAO,EAAA;AACX,IAAA;AAEA,IAAA,MAAMJ,MAAAA,GAAQJ,OAAAA,CAAQS,MAAAA,CAAOD,OAAAA,CAAAA;AAE7B,IAAA,OAAOJ,UAASM,4CAAAA,CAA+BV,OAAAA,EAASO,WAAAA,CAAAA,CAAaN,QAAAA,MAAcC,OAAAA,GAC7E;AAACE,MAAAA;QACD,EAAA;EACV,CAAA,CAAA;AAEA,EAAA,IAAI,CAACA,KAAAA,EAAO;AACR,IAAA,MAAM,IAAIO,KAAAA,CACN,CAAA,sCAAA,EAAyCV,QAAAA,CAAAA,cAAAA,EAAyBC,OAAAA,CAAAA,CAAS,CAAA;AAEnF,EAAA;AAEA,EAAA,OAAOU,WAAAA,CAAYR,OAAOD,SAAAA,CAAAA;AAC9B,CAAA,EA3BkC,oBAAA;AA6B3B,IAAMS,WAAAA,+CAAqBR,KAAAA,EAAcD,SAAAA,GAAuB,QACnEU,SAAAA,CACI,MAAMC,yBAAAA,EAAAA,EACN,MAAMC,+BAAAA,IACN,CAAA,EAAGC,0BAAAA,CAAaZ,KAAAA,CAAMa,IAAI,CAAA,CAAA,CAAA,EAAKC,YAAYd,KAAAA,EAAOD,SAAAA,CAAAA,CAAAA,CAAY,CAAA,EAJ3C,aAAA;AAOpB,IAAMe,8BAAcnB,oBAAA,CAAA,CAAC,EAAEoB,UAAUC,KAAAA,EAAK,EAAWjB,YAAuB,GAAA,KAC3E;AAAIkB,EAAAA,GAAAA,MAAAA,CAAOC,OAAAA,CAAQH,QAAAA,CAAAA,CAAUI,IAAAA,GAAOC,IAAAA,EAAI;KAAQJ,KAAAA,GAAQ;AAAC,IAAA,OAAA;AAASA,IAAAA;MAAS;AAAKP,CAAAA,CAAAA,IAAAA,CAAKV,SAAAA,CAAAA,EAD9D,aAAA;AAIpB,IAAMsB,aAAAA,yCAAiBC,MAAAA,KAAAA;AAC1B,EAAA,IAAIA,MAAAA,CAAOC,SAAS,MAAA,EAAQ;AACxB,IAAA,OAAO,CAAA,EAAGD,MAAAA,CAAOE,QAAQ,CAAA,CAAA,EAAIF,OAAOG,aAAa,CAAA,CAAA;AACrD,EAAA;AAEA,EAAA,MAAMC,UAAAA,GAAa;AAAC,IAAA,kBAAA;IAAoBJ,MAAAA,CAAOT;;AAE/C,EAAA,IAAI,CAACS,OAAOK,MAAAA,EAAQ;AAGhB,IAAA,MAAMC,WAAAA,GAAcC,QAAQC,GAAAA,CAAIC,gBAAAA;AAEhC,IAAA,IAAI,CAACH,WAAAA,EAAa;AACd,MAAA,MAAM,IAAIrB,MAAM,mDAAA,CAAA;AACpB,IAAA;AAEAmB,IAAAA,UAAAA,CAAWM,IAAAA,CAAKC,aAAAA,CAASL,WAAAA,CAAAA,CAAAA;AAC7B,EAAA;AAEA,EAAA,OAAO,GAAGF,UAAAA,CAAWjB,IAAAA,CAAK,GAAA,CAAA,CAAA,CAAA,EAAQa,OAAOG,aAAa,CAAA,CAAA;AAC1D,CAAA,EApB6B,eAAA","file":"HSCHZUOV.cjs","sourcesContent":["import { basename, join } from 'node:path';\n\nimport type { Image, VolumeMapping } from '../config';\nimport { getImageDirectory, getRegistry } from '../config';\nimport type { ChainContext } from '../context';\nimport { findToolVersionsForCombination, getImageName } from './finder';\n\nexport const getImageUriForTool = async <TImageId extends string>(\n    context: ChainContext<TImageId>,\n    toolName: string,\n    version: string,\n    separator: '_' | '-' = '_',\n): Promise<string> => {\n    const [image] = context.versionCombinations.flatMap((combination) => {\n        const imageId = combination.images[toolName];\n\n        if (!imageId) {\n            return [];\n        }\n\n        const image = context.images[imageId];\n\n        return image && findToolVersionsForCombination(context, combination)[toolName] === version\n            ? [image]\n            : [];\n    });\n\n    if (!image) {\n        throw new Error(\n            `No version combination found for tool ${toolName} with version ${version}`,\n        );\n    }\n\n    return getImageUri(image, separator);\n};\n\nexport const getImageUri = async (image: Image, separator: '_' | '-' = '_'): Promise<string> =>\n    join(\n        await getRegistry(),\n        await getImageDirectory(),\n        `${getImageName(image.name)}:${getImageTag(image, separator)}`,\n    );\n\nexport const getImageTag = ({ versions, patch }: Image, separator: '_' | '-' = '_'): string =>\n    [...Object.entries(versions).sort().flat(), ...(patch ? ['patch', patch] : [])].join(separator);\n\n// passing workspaceRoot is necessary for host volumes to resolve relative paths to the workspace root\nexport const getVolumeName = (volume: VolumeMapping): string => {\n    if (volume.type === 'host') {\n        return `${volume.hostPath}:${volume.containerPath}`;\n    }\n\n    const components = ['lz-tooling-cache', volume.name];\n\n    if (!volume.shared) {\n        // This is the package name where the `lz-tool` command is executed.\n        // eslint-disable-next-line turbo/no-undeclared-env-vars\n        const packageName = process.env.npm_package_name;\n\n        if (!packageName) {\n            throw new Error('npm_package_name environment variable not defined');\n        }\n\n        components.push(basename(packageName));\n    }\n\n    return `${components.join('-')}:${volume.containerPath}`;\n};\n"]}

package/dist/{33TVTWFZ.cjs → HXE3NVSB.cjs}

@@ -1,17 +1,17 @@
 'use strict';
 
-var _7FZK5RET_cjs = require('./7FZK5RET.cjs');
+var _7FXZ63DE_cjs = require('./7FXZ63DE.cjs');
 var _24WEKBY3_cjs = require('./24WEKBY3.cjs');
 var process = require('process');
 
 // src/github/index.ts
 _24WEKBY3_cjs.init_cjs_shims();
 var runGithubMatrixGenerator = /* @__PURE__ */ _24WEKBY3_cjs.__name(async (images, directory, versionCombinations) => {
-  const entries = _7FZK5RET_cjs.generateGithubMatrix(images, directory, versionCombinations);
+  const entries = _7FXZ63DE_cjs.generateGithubMatrix(images, directory, versionCombinations);
   console.warn("GitHub Action matrix generated:", JSON.stringify(entries, null, 2));
   process.stdout.write(JSON.stringify(entries));
 }, "runGithubMatrixGenerator");
 
 exports.runGithubMatrixGenerator = runGithubMatrixGenerator;
-//# sourceMappingURL=33TVTWFZ.cjs.map
-//# sourceMappingURL=33TVTWFZ.cjs.map
+//# sourceMappingURL=HXE3NVSB.cjs.map
+//# sourceMappingURL=HXE3NVSB.cjs.map

package/dist/{33TVTWFZ.cjs.map → HXE3NVSB.cjs.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/github/index.ts"],"names":["init_cjs_shims","runGithubMatrixGenerator","__name","images","directory","versionCombinations","entries","generateGithubMatrix","console","warn","JSON","stringify","stdout","write"],"mappings":";;;;;;;AAAAA,4BAAA,EAAA;AAKO,IAAMC,wBAAAA,mBAA2BC,oBAAA,CAAA,OACpCC,MAAAA,EACAC,SAAAA,EACAC,mBAAAA,KAAAA;AAEA,EAAA,MAAMC,OAAAA,GAAUC,kCAAAA,CAAqBJ,MAAAA,EAAQC,SAAAA,EAAWC,mBAAAA,CAAAA;AAExDG,EAAAA,OAAAA,CAAQC,KAAK,iCAAA,EAAmCC,IAAAA,CAAKC,UAAUL,OAAAA,EAAS,IAAA,EAAM,CAAA,CAAA,CAAA;AAC9EM,EAAAA,cAAAA,CAAOC,KAAAA,CAAMH,IAAAA,CAAKC,SAAAA,CAAUL,OAAAA,CAAAA,CAAAA;AAChC,CAAA,EATwC,0BAAA","file":"33TVTWFZ.cjs","sourcesContent":["import { stdout } from 'node:process';\n\nimport type { Image, VersionCombination } from '../config';\nimport { generateGithubMatrix } from './matrix';\n\nexport const runGithubMatrixGenerator = async (\n    images: Record<string, Image>,\n    directory: string,\n    versionCombinations?: VersionCombination<string>[],\n): Promise<void> => {\n    const entries = generateGithubMatrix(images, directory, versionCombinations);\n\n    console.warn('GitHub Action matrix generated:', JSON.stringify(entries, null, 2));\n    stdout.write(JSON.stringify(entries));\n};\n"]}
+{"version":3,"sources":["../src/github/index.ts"],"names":["init_cjs_shims","runGithubMatrixGenerator","__name","images","directory","versionCombinations","entries","generateGithubMatrix","console","warn","JSON","stringify","stdout","write"],"mappings":";;;;;;;AAAAA,4BAAA,EAAA;AAKO,IAAMC,wBAAAA,mBAA2BC,oBAAA,CAAA,OACpCC,MAAAA,EACAC,SAAAA,EACAC,mBAAAA,KAAAA;AAEA,EAAA,MAAMC,OAAAA,GAAUC,kCAAAA,CAAqBJ,MAAAA,EAAQC,SAAAA,EAAWC,mBAAAA,CAAAA;AAExDG,EAAAA,OAAAA,CAAQC,KAAK,iCAAA,EAAmCC,IAAAA,CAAKC,UAAUL,OAAAA,EAAS,IAAA,EAAM,CAAA,CAAA,CAAA;AAC9EM,EAAAA,cAAAA,CAAOC,KAAAA,CAAMH,IAAAA,CAAKC,SAAAA,CAAUL,OAAAA,CAAAA,CAAAA;AAChC,CAAA,EATwC,0BAAA","file":"HXE3NVSB.cjs","sourcesContent":["import { stdout } from 'node:process';\n\nimport type { Image, VersionCombination } from '../config';\nimport { generateGithubMatrix } from './matrix';\n\nexport const runGithubMatrixGenerator = async (\n    images: Record<string, Image>,\n    directory: string,\n    versionCombinations?: VersionCombination<string>[],\n): Promise<void> => {\n    const entries = generateGithubMatrix(images, directory, versionCombinations);\n\n    console.warn('GitHub Action matrix generated:', JSON.stringify(entries, null, 2));\n    stdout.write(JSON.stringify(entries));\n};\n"]}

package/dist/{WUF26TGR.js → KDX2NZOU.js}

@@ -1,6 +1,6 @@
 import { stringifyError } from './7XVJ6B7B.js';
 import { resolveTypeVersions } from './ZO7WI2XS.js';
-import { getImageUriForTool, getVolumeName } from './GPDDKHCR.js';
+import { getImageUriForTool, getVolumeName } from './ERBSYZRH.js';
 import { findWorkspaceRoot } from './WSGRZJVU.js';
 import { findToolByName } from './KWRJPB5T.js';
 import { lockMany } from './BAPGOHFS.js';
@@ -205,5 +205,5 @@ ${stdout}` : ""}`);
 __name(executeToolCommand, "executeToolCommand");
 
 export { executeToolCommand };
-//# sourceMappingURL=WUF26TGR.js.map
-//# sourceMappingURL=WUF26TGR.js.map
+//# sourceMappingURL=KDX2NZOU.js.map
+//# sourceMappingURL=KDX2NZOU.js.map

package/dist/{WUF26TGR.js.map → KDX2NZOU.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/core/tool-executor.ts"],"names":["getHostUserIds","userInfo","os","uid","gid","undefined","$","verbose","stdio","process","stderr","mergeVolumes","defaultVolumes","userVolumes","uniqBy","volume","containerPath","resolveVolumePaths","volumes","workspaceRoot","map","type","hostPath","path","resolve","replace","homedir","ensureDockerImage","imageUri","output","nothrow","quiet","exitCode","console","info","error","Error","stringifyError","isAuthError","includes","join","executeToolCommand","context","toolName","args","cwd","customEntrypoint","entrypoint","env","customEnvVars","script","publish","versions","tool","findToolByName","preExecute","length","name","overrides","filter","uv","some","dv","resolvedVersion","resolveTypeVersions","getSecondaryVersion","secondaryVersion","satisfies","warn","getImageUriForTool","findWorkspaceRoot","relativePath","relative","trim","defaultEnv","hasDockerSocketMount","v","dockerSocketEnv","value","envArgs","flatMap","hostUserIds","userIdEnvArgs","finalArgs","dockerArgs","privileged","p","getVolumeName","lockMany","locked","label","time","result","timeEnd","stdout"],"mappings":";;;;;;;;;;;;;;;AAAA,cAAA,EAAA;AAqBA,IAAMA,iCAAiB,MAAA,CAAA,MAAA;AAEnB,EAAA,MAAMC,QAAAA,GAAWC,GAAGD,QAAAA,EAAQ;AAC5B,EAAA,IAAIA,QAAAA,CAASE,GAAAA,KAAQ,EAAA,IAAMF,QAAAA,CAASG,QAAQ,EAAA,EAAI;AAC5C,IAAA,OAAOC,MAAAA;AACX,EAAA;AAEA,EAAA,OAAO;AAAEF,IAAAA,GAAAA,EAAKF,QAAAA,CAASE,GAAAA;AAAKC,IAAAA,GAAAA,EAAKH,QAAAA,CAASG;AAAI,GAAA;AAClD,CAAA,EARuB,gBAAA,CAAA;AAWvBE,CAAAA,CAAEC,OAAAA,GAAU,IAAA;AACZD,CAAAA,CAAEE,KAAAA,GAAQ;AAAC,EAAA,SAAA;AAAW,EAAA,MAAA;EAAQC,OAAAA,CAAQC;;AAMtC,IAAMC,YAAAA,mBAAe,MAAA,CAAA,CACjBC,cAAAA,EACAC,WAAAA,KACkBC,MAAAA,CAAO;AAAID,EAAAA,GAAAA,WAAAA;AAAgBD,EAAAA,GAAAA;GAAiB,CAACG,MAAAA,KAAWA,MAAAA,CAAOC,aAAa,CAAA,EAH7E,cAAA,CAAA;AAWrB,IAAMC,kBAAAA,mBAAqB,MAAA,CAAA,CAACC,OAAAA,EAA0BC,aAAAA,KAClDD,OAAAA,CAAQE,IAAI,CAACL,MAAAA,KACTA,MAAAA,CAAOM,IAAAA,KAAS,MAAA,GACV;EACI,GAAGN,MAAAA;EACHO,QAAAA,EAAUC,IAAAA,CAAKC,OAAAA,CACXL,aAAAA,EACAJ,MAAAA,CAAOO,QAAAA,CAASG,QAAQ,IAAA,EAAMvB,EAAAA,CAAGwB,OAAAA,EAAO,CAAA;AAEhD,CAAA,GACAX,MAAAA,CAAAA,EAVa,oBAAA,CAAA;AAa3B,IAAMY,iBAAAA,iCAA2BC,QAAAA,KAAAA;AAC7B,EAAA,IAAIC,MAAAA;AAEJ,EAAA,IAAI;AAWAA,IAAAA,MAAAA,GAAS,MAAMvB,CAAAA,CAAAA,sCAAAA,EAA0CsB,QAAAA,CAAAA,CAAAA,CAAWE,OAAAA,GAAUC,KAAAA,EAAK;AACnF,IAAA,IAAI,CAACF,OAAOG,QAAAA,EAAU;AAClBC,MAAAA,OAAAA,CAAQC,IAAAA,CAAK,CAAA,kCAAA,EAAgCN,QAAAA,CAAAA,CAAU,CAAA;AACvD,MAAA;AACJ,IAAA;AAEAK,IAAAA,OAAAA,CAAQC,IAAAA,CAAK,wCAAiCN,QAAAA,CAAAA;AAC9CC,IAAAA,MAAAA,GAAS,MAAMvB,CAAAA,CAAAA,YAAAA,EAAgBsB,QAAAA,CAAAA,CAAAA,CAAWE,OAAAA,EAAO;AACrD,EAAA,CAAA,CAAA,OAASK,KAAAA,EAAgB;AACrB,IAAA,MAAM,IAAIC,MAAM,CAAA,4BAAA,EAA+BR,QAAAA,KAAaS,cAAAA,CAAeF,KAAAA,CAAAA,CAAAA,CAAQ,CAAA;AACvF,EAAA;AAEA,EAAA,IAAIN,OAAOG,QAAAA,EAAU;AACjB,IAAA,MAAMtB,MAAAA,GAASmB,OAAOnB,MAAAA,IAAU,EAAA;AAChC,IAAA,MAAM4B,WAAAA,GACF5B,MAAAA,CAAO6B,QAAAA,CAAS,iCAAA,CAAA,IAChB7B,MAAAA,CAAO6B,QAAAA,CAAS,QAAA,CAAA,IAChB7B,MAAAA,CAAO6B,QAAAA,CAAS,oBAAA,CAAA;AAEpB,IAAA,MAAM,IAAIH,KAAAA,CACN;AACI,MAAA,6BAAA;AACA,MAAA,CAAA,WAAA,EAAcR,QAAAA,CAAAA,cAAAA,CAAAA;AACdU,MAAAA,WAAAA,GACM,gDAAA,GACA;AACRE,KAAAA,CAAAA,IAAAA,CAAK,IAAA,CAAA,CAAA;AAEf,EAAA;AAEAP,EAAAA,OAAAA,CAAQC,IAAAA,CAAK,CAAA,4BAAA,EAA0BN,QAAAA,CAAAA,CAAU,CAAA;AACrD,CAAA,EA7C0B,mBAAA,CAAA;AA6D1B,eAAsBa,mBAClBC,OAAAA,EACAC,QAAAA,EACAC,IAAAA,EACA,EACIC,KACA3B,OAAAA,EAASL,WAAAA,EACTiC,gBAAAA,EAAkBC,UAAAA,EAClBC,KAAKC,aAAAA,EACLC,MAAAA,EACAC,SACAC,QAAAA,GAAW,IAAE,EACa;AAE9B,EAAA,MAAMC,IAAAA,GAAOC,cAAAA,CAAeZ,OAAAA,EAASC,QAAAA,CAAAA;AAGrC,EAAA,IAAIU,KAAKE,UAAAA,EAAY;AACjB,IAAA,MAAMF,IAAAA,CAAKE,WAAWb,OAAAA,EAAS;AAC3BG,MAAAA,GAAAA;AACAD,MAAAA,IAAAA;MACA1B,OAAAA,EAASL,WAAAA;MACTmC,GAAAA,EAAKC,aAAAA;AACLC,MAAAA,MAAAA;AACAC,MAAAA,OAAAA;AACAC,MAAAA;KACJ,CAAA;AACJ,EAAA;AAGA,EAAA,MAAMxC,cAAAA,GAAiByC,IAAAA,CAAKzC,cAAAA,IAAkB,EAAA;AAC9C,EAAA,MAAMM,OAAAA,GAAUP,YAAAA,CAAaC,cAAAA,EAAgBC,WAAAA,CAAAA;AAE7C,EAAA,IAAID,cAAAA,CAAe4C,SAAS,CAAA,EAAG;AAC3BvB,IAAAA,OAAAA,CAAQC,KAAK,CAAA,gBAAA,EAAYtB,cAAAA,CAAe4C,MAAM,CAAA,6BAAA,EAAgCH,IAAAA,CAAKI,IAAI,CAAA,CAAE,CAAA;AACzF,IAAA,IAAI5C,WAAAA,CAAY2C,SAAS,CAAA,EAAG;AACxB,MAAA,MAAME,SAAAA,GAAY7C,WAAAA,CAAY8C,MAAAA,CAAO,CAACC,EAAAA,KAClChD,cAAAA,CAAeiD,IAAAA,CAAK,CAACC,EAAAA,KAAOA,EAAAA,CAAG9C,aAAAA,KAAkB4C,EAAAA,CAAG5C,aAAa,CAAA,CAAA;AAErE,MAAA,IAAI0C,SAAAA,CAAUF,SAAS,CAAA,EAAG;AACtBvB,QAAAA,OAAAA,CAAQC,IAAAA,CAAK,CAAA,gCAAA,EAA4BwB,SAAAA,CAAUF,MAAM,CAAA,kBAAA,CAAoB,CAAA;AACjF,MAAA;AACJ,IAAA;AACJ,EAAA;AAGA,EAAA,MAAMO,kBAAkBC,mBAAAA,CAAoBtB,OAAAA,EAASU,QAAAA,CAAAA,CAAUC,KAAKI,IAAI,CAAA;AAExE,EAAA,IAAI,CAACM,eAAAA,EAAiB;AAClB,IAAA,MAAM,IAAI3B,KAAAA,CAAM,CAAA,6BAAA,EAAgCiB,IAAAA,CAAKI,IAAI,CAAA,CAAE,CAAA;AAC/D,EAAA;AAEAxB,EAAAA,OAAAA,CAAQC,KAAK,CAAA,UAAA,EAAMmB,IAAAA,CAAKI,IAAI,CAAA,UAAA,EAAaM,eAAAA,CAAAA,CAAiB,CAAA;AAG1D,EAAA,IAAIV,KAAKY,mBAAAA,EAAqB;AAC1B,IAAA,IAAI;AACA,MAAA,MAAMC,gBAAAA,GAAmB,MAAMb,IAAAA,CAAKY,mBAAAA,CAAoB;AAAEpB,QAAAA;OAAI,CAAA;AAE9D,MAAA,IAAI,CAAQsB,MAAAA,CAAAA,SAAAA,CAAUD,gBAAAA,EAAkBH,eAAAA,CAAAA,EAAkB;AACtD9B,QAAAA,OAAAA,CAAQmC,IAAAA,CACJ,CAAA,sCAAA,EAAyCF,gBAAAA,CAAAA,iCAAAA,EAAoDH,eAAAA,CAAAA,CAAAA,CAAkB,CAAA;AAEvH,MAAA;AACJ,IAAA,CAAA,CAAA,OAAS5B,KAAAA,EAAO;AAEZF,MAAAA,OAAAA,CAAQmC,IAAAA,CAAK,uCAAA,EAAyC/B,cAAAA,CAAeF,KAAAA,CAAAA,CAAAA;AACzE,IAAA;AACJ,EAAA;AAGA,EAAA,MAAMP,WAAW,MAAMyC,kBAAAA,CAAmB3B,OAAAA,EAASW,IAAAA,CAAKI,MAAMM,eAAAA,CAAAA;AAC9D,EAAA,MAAM5C,aAAAA,GAAgB,MAAMmD,iBAAAA,CAAkBzB,GAAAA,CAAAA;AAC9C,EAAA,MAAM0B,YAAAA,GAAehD,IAAAA,CAAKiD,QAAAA,CAASrD,aAAAA,EAAe0B,GAAAA,CAAAA;AAElD,EAAA,MAAMlB,kBAAkBC,QAAAA,CAAAA;AAExB,EAAA,IAAImB,UAAAA,EAAY0B,MAAAA,EAAQ;AACpBxC,IAAAA,OAAAA,CAAQC,IAAAA,CAAK,CAAA,mCAAA,EAA+Ba,UAAAA,CAAAA,CAAY,CAAA;AAC5D,EAAA;AAGA,EAAA,MAAM2B,UAAAA,GAAarB,IAAAA,CAAKqB,UAAAA,IAAc,EAAA;AAItC,EAAA,MAAMC,oBAAAA,GAAuBzD,OAAAA,CAAQ2C,IAAAA,CACjC,CAACe,CAAAA,KAAMA,EAAEvD,IAAAA,KAAS,MAAA,IAAUuD,CAAAA,CAAE5D,aAAAA,KAAkB,sBAAA,CAAA;AAEpD,EAAA,MAAM6D,kBAAyCF,oBAAAA,GACzC;AACI,IAAA;MAAElB,IAAAA,EAAM,UAAA;MAAYqB,KAAAA,EAAOjC;AAAI,KAAA;AAC/B,IAAA;MAAEY,IAAAA,EAAM,qBAAA;MAAuBqB,KAAAA,EAAO3D;AAAc;MAExD,EAAA;AAEN,EAAA,MAAM4D,UAAUjE,MAAAA,CACZ;AAAImC,IAAAA,GAAAA,aAAAA;AAAkB4B,IAAAA,GAAAA,eAAAA;AAAoBH,IAAAA,GAAAA;KAC1C,CAAC,EAAEjB,IAAAA,EAAI,KAAOA,IAAAA,CAAAA,CAChBuB,QAAQ,CAAC,EAAEvB,IAAAA,EAAMqB,KAAAA,EAAK,KAAO;AAAC,IAAA,IAAA;IAAM,CAAA,EAAGrB,IAAAA,IAAQqB,KAAAA,CAAAA;AAAQ,GAAA,CAAA;AAKzD,EAAA,MAAMG,cAAcjF,cAAAA,EAAAA;AACpB,EAAA,MAAMkF,gBAAgBD,WAAAA,GAChB;AAAC,IAAA,IAAA;AAAM,IAAA,CAAA,UAAA,EAAaA,YAAY9E,GAAG,CAAA,CAAA;AAAI,IAAA,IAAA;AAAM,IAAA,CAAA,UAAA,EAAa8E,YAAY7E,GAAG,CAAA;MACzE,EAAA;AAEN6B,EAAAA,OAAAA,CAAQC,KAAK,CAAA,uCAAA,EAAmC+C,WAAAA,EAAa9E,GAAAA,CAAAA,CAAAA,EAAO8E,WAAAA,EAAa7E,GAAAA,CAAAA,CAAK,CAAA;AAEtF,EAAA,IAAIsE,UAAAA,CAAWlB,SAAS,CAAA,EAAG;AACvBvB,IAAAA,OAAAA,CAAQC,KACJ,CAAA,gBAAA,EAAYwC,UAAAA,CAAWlB,MAAM,CAAA,qCAAA,EAAwCH,IAAAA,CAAKI,IAAI,CAAA,CAAE,CAAA;AAExF,EAAA;AACA,EAAA,IAAIR,aAAAA,CAAcO,SAAS,CAAA,EAAG;AAC1BvB,IAAAA,OAAAA,CAAQC,IAAAA,CAAK,CAAA,gBAAA,EAAYe,aAAAA,CAAcO,MAAM,CAAA,+BAAA,CAAiC,CAAA;AAClF,EAAA;AAGA,EAAA,IAAI2B,SAAAA;AACJ,EAAA,IAAIjC,MAAAA,IAAUA,MAAAA,CAAOuB,IAAAA,EAAI,KAAO,EAAA,EAAI;AAChCxC,IAAAA,OAAAA,CAAQC,IAAAA,CAAK,CAAA,mCAAA,EAA+BgB,MAAAA,CAAAA,CAAQ,CAAA;AACpDiC,IAAAA,SAAAA,GAAY;AAAC,MAAA,MAAA;AAAQ,MAAA,IAAA;AAAMjC,MAAAA;;EAC/B,CAAA,MAAO;AACHiC,IAAAA,SAAAA,GAAYpC,eAAe1C,MAAAA,GAAY;MAACgD,IAAAA,CAAKI,IAAAA;AAASb,MAAAA,GAAAA;AAAQA,KAAAA,GAAAA,IAAAA;AAClE,EAAA;AAGA,EAAA,MAAMwC,UAAAA,GAAa;AACf,IAAA,KAAA;AACI/B,IAAAA,GAAAA,IAAAA,CAAKgC,UAAAA,GAAa;AAAC,MAAA;QAAkB,EAAA;AACzC,IAAA,MAAA;AACA,IAAA,8CAAA;AACGN,IAAAA,GAAAA,OAAAA;AACAG,IAAAA,GAAAA,aAAAA;AACH,IAAA,IAAA;AACA,IAAA,CAAA,EAAG/D,aAAAA,CAAAA,WAAAA,CAAAA;AACH,IAAA,IAAA;AACA,IAAA,CAAA,WAAA,EAAcoD,YAAAA,CAAAA,CAAAA;AACVpB,IAAAA,GAAAA,CAAAA,OAAAA,IAAW,EAAA,EAAI6B,OAAAA,CAAQ,CAACM,CAAAA,KAAM;AAAC,MAAA,IAAA;AAAMA,MAAAA,CAAAA,CAAEb,IAAAA;AAAO,KAAA,CAAA;AAC/CxD,IAAAA,GAAAA,kBAAAA,CAAmBC,OAAAA,EAASC,aAAAA,CAAAA,CAAe6D,OAAAA,CAAQ,CAACjE,MAAAA,KAAW;AAC9D,MAAA,IAAA;AACAwE,MAAAA,aAAAA,CAAcxE,MAAAA;AACjB,KAAA,CAAA;OACGgC,UAAAA,GAAa;AAAC,MAAA,cAAA;AAAgBA,MAAAA;QAAc,EAAA;AAChDnB,IAAAA,QAAAA;AACGuD,IAAAA,GAAAA;;AAGP,EAAA,MAAMtD,MAAAA,GAAS,MAAM2D,QAAAA,CACjBtE,OAAAA,CAAQ8D,OAAAA,CAAQ,CAACjE,MAAAA,KACbA,MAAAA,CAAOM,IAAAA,KAAS,SAAA,IAAaN,MAAAA,CAAO0E,MAAAA,GAAS;IAAC1E,MAAAA,CAAO0C;MAAQ,EAAE,GAEnE,YAAA;AACI,IAAA,MAAMiC,KAAAA,GAAQ,CAAA,aAAA,EAAMP,SAAAA,CAAU3C,IAAAA,CAAK,GAAA,CAAA,CAAA,CAAA;AACnCP,IAAAA,OAAAA,CAAQ0D,KAAKD,KAAAA,CAAAA;AACb,IAAA,MAAME,MAAAA,GAAS,MAAMtF,CAAAA,CAAAA,OAAAA,EAAW8E,UAAAA,GAAatD,OAAAA,EAAO;AACpDG,IAAAA,OAAAA,CAAQ4D,QAAQH,KAAAA,CAAAA;AAEhB,IAAA,OAAOE,MAAAA;EACX,CAAA,CAAA;AAGJ,EAAA,IAAI/D,OAAOG,QAAAA,EAAU;AACjB,IAAA,MAAM8D,MAAAA,GAASjE,MAAAA,CAAOiE,MAAAA,CAAOrB,IAAAA,EAAI;AACjC,IAAA,MAAM,IAAIrC,KAAAA,CACN,CAAA,2CAAA,EAA8CP,MAAAA,CAAOG,QAAQ,IAAI8D,MAAAA,GAAS;EAAKA,MAAAA,CAAAA,CAAAA,GAAW,EAAA,CAAA,CAAI,CAAA;AAEtG,EAAA;AAEA,EAAA,OAAOjE,MAAAA;AACX;AA7KsBY,MAAAA,CAAAA,kBAAAA,EAAAA,oBAAAA,CAAAA","file":"WUF26TGR.js","sourcesContent":["import { uniqBy } from 'es-toolkit';\nimport os from 'node:os';\nimport path from 'node:path';\nimport process from 'node:process';\nimport * as semver from 'semver';\nimport { $, type ProcessOutput } from 'zx';\n\nimport type { EnvironmentVariable, VolumeMapping } from '../config';\nimport type { ChainContext } from '../context';\nimport { findWorkspaceRoot } from '../utils';\nimport { getImageUriForTool, getVolumeName } from '../utils/docker';\nimport { stringifyError } from '../utils/error';\nimport { findToolByName } from '../utils/finder';\nimport { lockMany } from './lock';\nimport { resolveTypeVersions } from './version-resolver';\n\n/**\n * Get the current user's UID and GID for Docker container user matching.\n * This prevents permission issues when containers write to bind-mounted directories.\n * On Windows or when running as root, returns undefined as UID/GID matching is not needed.\n */\nconst getHostUserIds = (): { uid: number; gid: number } | undefined => {\n    // os.userInfo() returns uid/gid on POSIX systems, -1 on Windows\n    const userInfo = os.userInfo();\n    if (userInfo.uid === -1 || userInfo.gid === -1) {\n        return undefined;\n    }\n\n    return { uid: userInfo.uid, gid: userInfo.gid };\n};\n\n// Configure zx to inherit stdio by default (moved from original setup)\n$.verbose = true;\n$.stdio = ['inherit', 'pipe', process.stderr];\n\n/**\n * Merge default volumes with user-specified volumes\n * User volumes take precedence when containerPath conflicts\n */\nconst mergeVolumes = (\n    defaultVolumes: readonly VolumeMapping[],\n    userVolumes: readonly VolumeMapping[],\n): VolumeMapping[] => uniqBy([...userVolumes, ...defaultVolumes], (volume) => volume.containerPath);\n\n/**\n * Resolve host paths in volumes to absolute paths\n * - Paths starting with ~ are resolved to home directory\n * - Relative paths (starting with . or no prefix) are resolved to workspace root\n * - Absolute paths are left unchanged\n */\nconst resolveVolumePaths = (volumes: VolumeMapping[], workspaceRoot: string): VolumeMapping[] =>\n    volumes.map((volume) =>\n        volume.type === 'host'\n            ? {\n                  ...volume,\n                  hostPath: path.resolve(\n                      workspaceRoot,\n                      volume.hostPath.replace(/^~/, os.homedir()),\n                  ),\n              }\n            : volume,\n    );\n\nconst ensureDockerImage = async (imageUri: string): Promise<void> => {\n    let output: ProcessOutput;\n\n    try {\n        // Check local images first.\n        //\n        // NOTE: `docker image ls <ref>` prints repository/tag in separate columns, so\n        // `stdout.includes(<full-ref>)` is not reliable. Use `inspect` instead: exitCode=0\n        // means the image exists locally.\n        // Keep output minimal to avoid dumping full inspect JSON into CI logs.\n        //\n        // NOTE: Using `.quiet()` to avoid stderr being captured in the CI logs. If the image\n        // is not in the cache, the process prints \"Error response from daemon: No such image: ...\"\n        // which can confuse the uninitiated. It's just a cache miss, not an error.\n        output = await $`docker image inspect --format {{.Id}} ${imageUri}`.nothrow().quiet();\n        if (!output.exitCode) {\n            console.info(`✅ Using cached Docker image: ${imageUri}`);\n            return;\n        }\n\n        console.info('📥 Pulling Docker image from:', imageUri);\n        output = await $`docker pull ${imageUri}`.nothrow();\n    } catch (error: unknown) {\n        throw new Error(`Failed to pull Docker image ${imageUri}: ${stringifyError(error)}`);\n    }\n\n    if (output.exitCode) {\n        const stderr = output.stderr ?? '';\n        const isAuthError =\n            stderr.includes('authorization token has expired') ||\n            stderr.includes('denied') ||\n            stderr.includes('pull access denied');\n\n        throw new Error(\n            [\n                'Docker image not available:',\n                `  - Image: ${imageUri} (pull failed)`,\n                isAuthError\n                    ? '  - ECR auth expired. Run: pnpm localnet login'\n                    : '  - Check if the image tag exists in image registry.',\n            ].join('\\n'),\n        );\n    }\n\n    console.info(`✅ Successfully pulled: ${imageUri}`);\n};\n\nexport interface ToolCommandExecutionOptions {\n    cwd: string;\n    volumes: readonly VolumeMapping[];\n    customEntrypoint?: string;\n    env: EnvironmentVariable[];\n    args?: string[];\n    script?: string;\n    publish?: string[];\n    versions?: Record<string, string>;\n}\n\n/**\n * Enhanced tool command execution using the new version compatibility matrix system\n */\nexport async function executeToolCommand<TImageId extends string>(\n    context: ChainContext<TImageId>,\n    toolName: string,\n    args: string[],\n    {\n        cwd,\n        volumes: userVolumes,\n        customEntrypoint: entrypoint,\n        env: customEnvVars,\n        script,\n        publish,\n        versions = {},\n    }: ToolCommandExecutionOptions,\n): Promise<ProcessOutput> {\n    const tool = findToolByName(context, toolName);\n\n    // Run pre-execution hook if defined (e.g., toolchain sync)\n    if (tool.preExecute) {\n        await tool.preExecute(context, {\n            cwd,\n            args,\n            volumes: userVolumes,\n            env: customEnvVars,\n            script,\n            publish,\n            versions,\n        });\n    }\n\n    // Merge default volumes with user-specified volumes\n    const defaultVolumes = tool.defaultVolumes ?? [];\n    const volumes = mergeVolumes(defaultVolumes, userVolumes);\n\n    if (defaultVolumes.length > 0) {\n        console.info(`📦 Using ${defaultVolumes.length} default cache volume(s) for ${tool.name}`);\n        if (userVolumes.length > 0) {\n            const overrides = userVolumes.filter((uv) =>\n                defaultVolumes.some((dv) => dv.containerPath === uv.containerPath),\n            );\n            if (overrides.length > 0) {\n                console.info(`🔧 User volumes override ${overrides.length} default volume(s)`);\n            }\n        }\n    }\n\n    // Get the resolved version for the current tool.\n    const resolvedVersion = resolveTypeVersions(context, versions)[tool.name];\n\n    if (!resolvedVersion) {\n        throw new Error(`No version resolved for tool ${tool.name}`);\n    }\n\n    console.info(`🔧 ${tool.name} version: ${resolvedVersion}`);\n\n    // Check secondary version validation if available\n    if (tool.getSecondaryVersion) {\n        try {\n            const secondaryVersion = await tool.getSecondaryVersion({ cwd });\n\n            if (!semver.satisfies(secondaryVersion, resolvedVersion)) {\n                console.warn(\n                    `Warning: Local configuration version (${secondaryVersion}) differs from resolved version (${resolvedVersion})`,\n                );\n            }\n        } catch (error) {\n            // Secondary version check failed, but continue with resolved version\n            console.warn('Could not validate secondary version:', stringifyError(error));\n        }\n    }\n\n    // Use Docker image with merged volumes\n    const imageUri = await getImageUriForTool(context, tool.name, resolvedVersion);\n    const workspaceRoot = await findWorkspaceRoot(cwd);\n    const relativePath = path.relative(workspaceRoot, cwd);\n\n    await ensureDockerImage(imageUri);\n\n    if (entrypoint?.trim()) {\n        console.info(`🔧 Using custom entrypoint: ${entrypoint}`);\n    }\n\n    // Merge default env vars with custom env vars (custom takes precedence)\n    const defaultEnv = tool.defaultEnv ?? [];\n\n    // Check if Docker socket is mounted (for tools that spawn Docker containers like anchor --verifiable)\n    // If so, inject HOST_CWD and HOST_WORKSPACE_ROOT so the inner container knows the host paths\n    const hasDockerSocketMount = volumes.some(\n        (v) => v.type === 'host' && v.containerPath === '/var/run/docker.sock',\n    );\n    const dockerSocketEnv: EnvironmentVariable[] = hasDockerSocketMount\n        ? [\n              { name: 'HOST_CWD', value: cwd },\n              { name: 'HOST_WORKSPACE_ROOT', value: workspaceRoot },\n          ]\n        : [];\n\n    const envArgs = uniqBy(\n        [...customEnvVars, ...dockerSocketEnv, ...defaultEnv],\n        ({ name }) => name,\n    ).flatMap(({ name, value }) => ['-e', `${name}=${value}`]);\n\n    // Add host user UID/GID for permission matching on Linux/macOS\n    // This prevents artifacts created in containers from having root ownership\n    // Currently only used for stellar which has an entrypoint that handles UID/GID\n    const hostUserIds = getHostUserIds();\n    const userIdEnvArgs = hostUserIds\n        ? ['-e', `LOCAL_UID=${hostUserIds.uid}`, '-e', `LOCAL_GID=${hostUserIds.gid}`]\n        : [];\n\n    console.info(`👤 Running container as UID:GID ${hostUserIds?.uid}:${hostUserIds?.gid}`);\n\n    if (defaultEnv.length > 0) {\n        console.info(\n            `🌍 Using ${defaultEnv.length} default environment variable(s) for ${tool.name}`,\n        );\n    }\n    if (customEnvVars.length > 0) {\n        console.info(`🌍 Using ${customEnvVars.length} custom environment variable(s)`);\n    }\n\n    // Handle custom script execution\n    let finalArgs: string[];\n    if (script && script.trim() !== '') {\n        console.info(`📜 Executing custom script: ${script}`);\n        finalArgs = ['bash', '-c', script];\n    } else {\n        finalArgs = entrypoint === undefined ? [tool.name, ...args] : args;\n    }\n\n    // Build the Docker command with proper argument separation\n    const dockerArgs = [\n        'run',\n        ...(tool.privileged ? ['--privileged'] : []),\n        '--rm',\n        '--add-host=host.docker.internal:host-gateway',\n        ...envArgs,\n        ...userIdEnvArgs,\n        '-v',\n        `${workspaceRoot}:/workspace`,\n        '-w',\n        `/workspace/${relativePath}`,\n        ...(publish ?? []).flatMap((p) => ['-p', p.trim()]),\n        ...resolveVolumePaths(volumes, workspaceRoot).flatMap((volume) => [\n            '-v',\n            getVolumeName(volume),\n        ]),\n        ...(entrypoint ? ['--entrypoint', entrypoint] : []),\n        imageUri,\n        ...finalArgs,\n    ];\n\n    const output = await lockMany(\n        volumes.flatMap((volume) =>\n            volume.type === 'isolate' && volume.locked ? [volume.name] : [],\n        ),\n        async () => {\n            const label = `⏱️ ${finalArgs.join(' ')}`;\n            console.time(label);\n            const result = await $`docker ${dockerArgs}`.nothrow();\n            console.timeEnd(label);\n\n            return result;\n        },\n    );\n\n    if (output.exitCode) {\n        const stdout = output.stdout.trim();\n        throw new Error(\n            `Failed to run Docker container (exit code: ${output.exitCode})${stdout ? `\\n${stdout}` : ''}`,\n        );\n    }\n\n    return output;\n}\n"]}
+{"version":3,"sources":["../src/core/tool-executor.ts"],"names":["getHostUserIds","userInfo","os","uid","gid","undefined","$","verbose","stdio","process","stderr","mergeVolumes","defaultVolumes","userVolumes","uniqBy","volume","containerPath","resolveVolumePaths","volumes","workspaceRoot","map","type","hostPath","path","resolve","replace","homedir","ensureDockerImage","imageUri","output","nothrow","quiet","exitCode","console","info","error","Error","stringifyError","isAuthError","includes","join","executeToolCommand","context","toolName","args","cwd","customEntrypoint","entrypoint","env","customEnvVars","script","publish","versions","tool","findToolByName","preExecute","length","name","overrides","filter","uv","some","dv","resolvedVersion","resolveTypeVersions","getSecondaryVersion","secondaryVersion","satisfies","warn","getImageUriForTool","findWorkspaceRoot","relativePath","relative","trim","defaultEnv","hasDockerSocketMount","v","dockerSocketEnv","value","envArgs","flatMap","hostUserIds","userIdEnvArgs","finalArgs","dockerArgs","privileged","p","getVolumeName","lockMany","locked","label","time","result","timeEnd","stdout"],"mappings":";;;;;;;;;;;;;;;AAAA,cAAA,EAAA;AAqBA,IAAMA,iCAAiB,MAAA,CAAA,MAAA;AAEnB,EAAA,MAAMC,QAAAA,GAAWC,GAAGD,QAAAA,EAAQ;AAC5B,EAAA,IAAIA,QAAAA,CAASE,GAAAA,KAAQ,EAAA,IAAMF,QAAAA,CAASG,QAAQ,EAAA,EAAI;AAC5C,IAAA,OAAOC,MAAAA;AACX,EAAA;AAEA,EAAA,OAAO;AAAEF,IAAAA,GAAAA,EAAKF,QAAAA,CAASE,GAAAA;AAAKC,IAAAA,GAAAA,EAAKH,QAAAA,CAASG;AAAI,GAAA;AAClD,CAAA,EARuB,gBAAA,CAAA;AAWvBE,CAAAA,CAAEC,OAAAA,GAAU,IAAA;AACZD,CAAAA,CAAEE,KAAAA,GAAQ;AAAC,EAAA,SAAA;AAAW,EAAA,MAAA;EAAQC,OAAAA,CAAQC;;AAMtC,IAAMC,YAAAA,mBAAe,MAAA,CAAA,CACjBC,cAAAA,EACAC,WAAAA,KACkBC,MAAAA,CAAO;AAAID,EAAAA,GAAAA,WAAAA;AAAgBD,EAAAA,GAAAA;GAAiB,CAACG,MAAAA,KAAWA,MAAAA,CAAOC,aAAa,CAAA,EAH7E,cAAA,CAAA;AAWrB,IAAMC,kBAAAA,mBAAqB,MAAA,CAAA,CAACC,OAAAA,EAA0BC,aAAAA,KAClDD,OAAAA,CAAQE,IAAI,CAACL,MAAAA,KACTA,MAAAA,CAAOM,IAAAA,KAAS,MAAA,GACV;EACI,GAAGN,MAAAA;EACHO,QAAAA,EAAUC,IAAAA,CAAKC,OAAAA,CACXL,aAAAA,EACAJ,MAAAA,CAAOO,QAAAA,CAASG,QAAQ,IAAA,EAAMvB,EAAAA,CAAGwB,OAAAA,EAAO,CAAA;AAEhD,CAAA,GACAX,MAAAA,CAAAA,EAVa,oBAAA,CAAA;AAa3B,IAAMY,iBAAAA,iCAA2BC,QAAAA,KAAAA;AAC7B,EAAA,IAAIC,MAAAA;AAEJ,EAAA,IAAI;AAWAA,IAAAA,MAAAA,GAAS,MAAMvB,CAAAA,CAAAA,sCAAAA,EAA0CsB,QAAAA,CAAAA,CAAAA,CAAWE,OAAAA,GAAUC,KAAAA,EAAK;AACnF,IAAA,IAAI,CAACF,OAAOG,QAAAA,EAAU;AAClBC,MAAAA,OAAAA,CAAQC,IAAAA,CAAK,CAAA,kCAAA,EAAgCN,QAAAA,CAAAA,CAAU,CAAA;AACvD,MAAA;AACJ,IAAA;AAEAK,IAAAA,OAAAA,CAAQC,IAAAA,CAAK,wCAAiCN,QAAAA,CAAAA;AAC9CC,IAAAA,MAAAA,GAAS,MAAMvB,CAAAA,CAAAA,YAAAA,EAAgBsB,QAAAA,CAAAA,CAAAA,CAAWE,OAAAA,EAAO;AACrD,EAAA,CAAA,CAAA,OAASK,KAAAA,EAAgB;AACrB,IAAA,MAAM,IAAIC,MAAM,CAAA,4BAAA,EAA+BR,QAAAA,KAAaS,cAAAA,CAAeF,KAAAA,CAAAA,CAAAA,CAAQ,CAAA;AACvF,EAAA;AAEA,EAAA,IAAIN,OAAOG,QAAAA,EAAU;AACjB,IAAA,MAAMtB,MAAAA,GAASmB,OAAOnB,MAAAA,IAAU,EAAA;AAChC,IAAA,MAAM4B,WAAAA,GACF5B,MAAAA,CAAO6B,QAAAA,CAAS,iCAAA,CAAA,IAChB7B,MAAAA,CAAO6B,QAAAA,CAAS,QAAA,CAAA,IAChB7B,MAAAA,CAAO6B,QAAAA,CAAS,oBAAA,CAAA;AAEpB,IAAA,MAAM,IAAIH,KAAAA,CACN;AACI,MAAA,6BAAA;AACA,MAAA,CAAA,WAAA,EAAcR,QAAAA,CAAAA,cAAAA,CAAAA;AACdU,MAAAA,WAAAA,GACM,gDAAA,GACA;AACRE,KAAAA,CAAAA,IAAAA,CAAK,IAAA,CAAA,CAAA;AAEf,EAAA;AAEAP,EAAAA,OAAAA,CAAQC,IAAAA,CAAK,CAAA,4BAAA,EAA0BN,QAAAA,CAAAA,CAAU,CAAA;AACrD,CAAA,EA7C0B,mBAAA,CAAA;AA6D1B,eAAsBa,mBAClBC,OAAAA,EACAC,QAAAA,EACAC,IAAAA,EACA,EACIC,KACA3B,OAAAA,EAASL,WAAAA,EACTiC,gBAAAA,EAAkBC,UAAAA,EAClBC,KAAKC,aAAAA,EACLC,MAAAA,EACAC,SACAC,QAAAA,GAAW,IAAE,EACa;AAE9B,EAAA,MAAMC,IAAAA,GAAOC,cAAAA,CAAeZ,OAAAA,EAASC,QAAAA,CAAAA;AAGrC,EAAA,IAAIU,KAAKE,UAAAA,EAAY;AACjB,IAAA,MAAMF,IAAAA,CAAKE,WAAWb,OAAAA,EAAS;AAC3BG,MAAAA,GAAAA;AACAD,MAAAA,IAAAA;MACA1B,OAAAA,EAASL,WAAAA;MACTmC,GAAAA,EAAKC,aAAAA;AACLC,MAAAA,MAAAA;AACAC,MAAAA,OAAAA;AACAC,MAAAA;KACJ,CAAA;AACJ,EAAA;AAGA,EAAA,MAAMxC,cAAAA,GAAiByC,IAAAA,CAAKzC,cAAAA,IAAkB,EAAA;AAC9C,EAAA,MAAMM,OAAAA,GAAUP,YAAAA,CAAaC,cAAAA,EAAgBC,WAAAA,CAAAA;AAE7C,EAAA,IAAID,cAAAA,CAAe4C,SAAS,CAAA,EAAG;AAC3BvB,IAAAA,OAAAA,CAAQC,KAAK,CAAA,gBAAA,EAAYtB,cAAAA,CAAe4C,MAAM,CAAA,6BAAA,EAAgCH,IAAAA,CAAKI,IAAI,CAAA,CAAE,CAAA;AACzF,IAAA,IAAI5C,WAAAA,CAAY2C,SAAS,CAAA,EAAG;AACxB,MAAA,MAAME,SAAAA,GAAY7C,WAAAA,CAAY8C,MAAAA,CAAO,CAACC,EAAAA,KAClChD,cAAAA,CAAeiD,IAAAA,CAAK,CAACC,EAAAA,KAAOA,EAAAA,CAAG9C,aAAAA,KAAkB4C,EAAAA,CAAG5C,aAAa,CAAA,CAAA;AAErE,MAAA,IAAI0C,SAAAA,CAAUF,SAAS,CAAA,EAAG;AACtBvB,QAAAA,OAAAA,CAAQC,IAAAA,CAAK,CAAA,gCAAA,EAA4BwB,SAAAA,CAAUF,MAAM,CAAA,kBAAA,CAAoB,CAAA;AACjF,MAAA;AACJ,IAAA;AACJ,EAAA;AAGA,EAAA,MAAMO,kBAAkBC,mBAAAA,CAAoBtB,OAAAA,EAASU,QAAAA,CAAAA,CAAUC,KAAKI,IAAI,CAAA;AAExE,EAAA,IAAI,CAACM,eAAAA,EAAiB;AAClB,IAAA,MAAM,IAAI3B,KAAAA,CAAM,CAAA,6BAAA,EAAgCiB,IAAAA,CAAKI,IAAI,CAAA,CAAE,CAAA;AAC/D,EAAA;AAEAxB,EAAAA,OAAAA,CAAQC,KAAK,CAAA,UAAA,EAAMmB,IAAAA,CAAKI,IAAI,CAAA,UAAA,EAAaM,eAAAA,CAAAA,CAAiB,CAAA;AAG1D,EAAA,IAAIV,KAAKY,mBAAAA,EAAqB;AAC1B,IAAA,IAAI;AACA,MAAA,MAAMC,gBAAAA,GAAmB,MAAMb,IAAAA,CAAKY,mBAAAA,CAAoB;AAAEpB,QAAAA;OAAI,CAAA;AAE9D,MAAA,IAAI,CAAQsB,MAAAA,CAAAA,SAAAA,CAAUD,gBAAAA,EAAkBH,eAAAA,CAAAA,EAAkB;AACtD9B,QAAAA,OAAAA,CAAQmC,IAAAA,CACJ,CAAA,sCAAA,EAAyCF,gBAAAA,CAAAA,iCAAAA,EAAoDH,eAAAA,CAAAA,CAAAA,CAAkB,CAAA;AAEvH,MAAA;AACJ,IAAA,CAAA,CAAA,OAAS5B,KAAAA,EAAO;AAEZF,MAAAA,OAAAA,CAAQmC,IAAAA,CAAK,uCAAA,EAAyC/B,cAAAA,CAAeF,KAAAA,CAAAA,CAAAA;AACzE,IAAA;AACJ,EAAA;AAGA,EAAA,MAAMP,WAAW,MAAMyC,kBAAAA,CAAmB3B,OAAAA,EAASW,IAAAA,CAAKI,MAAMM,eAAAA,CAAAA;AAC9D,EAAA,MAAM5C,aAAAA,GAAgB,MAAMmD,iBAAAA,CAAkBzB,GAAAA,CAAAA;AAC9C,EAAA,MAAM0B,YAAAA,GAAehD,IAAAA,CAAKiD,QAAAA,CAASrD,aAAAA,EAAe0B,GAAAA,CAAAA;AAElD,EAAA,MAAMlB,kBAAkBC,QAAAA,CAAAA;AAExB,EAAA,IAAImB,UAAAA,EAAY0B,MAAAA,EAAQ;AACpBxC,IAAAA,OAAAA,CAAQC,IAAAA,CAAK,CAAA,mCAAA,EAA+Ba,UAAAA,CAAAA,CAAY,CAAA;AAC5D,EAAA;AAGA,EAAA,MAAM2B,UAAAA,GAAarB,IAAAA,CAAKqB,UAAAA,IAAc,EAAA;AAItC,EAAA,MAAMC,oBAAAA,GAAuBzD,OAAAA,CAAQ2C,IAAAA,CACjC,CAACe,CAAAA,KAAMA,EAAEvD,IAAAA,KAAS,MAAA,IAAUuD,CAAAA,CAAE5D,aAAAA,KAAkB,sBAAA,CAAA;AAEpD,EAAA,MAAM6D,kBAAyCF,oBAAAA,GACzC;AACI,IAAA;MAAElB,IAAAA,EAAM,UAAA;MAAYqB,KAAAA,EAAOjC;AAAI,KAAA;AAC/B,IAAA;MAAEY,IAAAA,EAAM,qBAAA;MAAuBqB,KAAAA,EAAO3D;AAAc;MAExD,EAAA;AAEN,EAAA,MAAM4D,UAAUjE,MAAAA,CACZ;AAAImC,IAAAA,GAAAA,aAAAA;AAAkB4B,IAAAA,GAAAA,eAAAA;AAAoBH,IAAAA,GAAAA;KAC1C,CAAC,EAAEjB,IAAAA,EAAI,KAAOA,IAAAA,CAAAA,CAChBuB,QAAQ,CAAC,EAAEvB,IAAAA,EAAMqB,KAAAA,EAAK,KAAO;AAAC,IAAA,IAAA;IAAM,CAAA,EAAGrB,IAAAA,IAAQqB,KAAAA,CAAAA;AAAQ,GAAA,CAAA;AAKzD,EAAA,MAAMG,cAAcjF,cAAAA,EAAAA;AACpB,EAAA,MAAMkF,gBAAgBD,WAAAA,GAChB;AAAC,IAAA,IAAA;AAAM,IAAA,CAAA,UAAA,EAAaA,YAAY9E,GAAG,CAAA,CAAA;AAAI,IAAA,IAAA;AAAM,IAAA,CAAA,UAAA,EAAa8E,YAAY7E,GAAG,CAAA;MACzE,EAAA;AAEN6B,EAAAA,OAAAA,CAAQC,KAAK,CAAA,uCAAA,EAAmC+C,WAAAA,EAAa9E,GAAAA,CAAAA,CAAAA,EAAO8E,WAAAA,EAAa7E,GAAAA,CAAAA,CAAK,CAAA;AAEtF,EAAA,IAAIsE,UAAAA,CAAWlB,SAAS,CAAA,EAAG;AACvBvB,IAAAA,OAAAA,CAAQC,KACJ,CAAA,gBAAA,EAAYwC,UAAAA,CAAWlB,MAAM,CAAA,qCAAA,EAAwCH,IAAAA,CAAKI,IAAI,CAAA,CAAE,CAAA;AAExF,EAAA;AACA,EAAA,IAAIR,aAAAA,CAAcO,SAAS,CAAA,EAAG;AAC1BvB,IAAAA,OAAAA,CAAQC,IAAAA,CAAK,CAAA,gBAAA,EAAYe,aAAAA,CAAcO,MAAM,CAAA,+BAAA,CAAiC,CAAA;AAClF,EAAA;AAGA,EAAA,IAAI2B,SAAAA;AACJ,EAAA,IAAIjC,MAAAA,IAAUA,MAAAA,CAAOuB,IAAAA,EAAI,KAAO,EAAA,EAAI;AAChCxC,IAAAA,OAAAA,CAAQC,IAAAA,CAAK,CAAA,mCAAA,EAA+BgB,MAAAA,CAAAA,CAAQ,CAAA;AACpDiC,IAAAA,SAAAA,GAAY;AAAC,MAAA,MAAA;AAAQ,MAAA,IAAA;AAAMjC,MAAAA;;EAC/B,CAAA,MAAO;AACHiC,IAAAA,SAAAA,GAAYpC,eAAe1C,MAAAA,GAAY;MAACgD,IAAAA,CAAKI,IAAAA;AAASb,MAAAA,GAAAA;AAAQA,KAAAA,GAAAA,IAAAA;AAClE,EAAA;AAGA,EAAA,MAAMwC,UAAAA,GAAa;AACf,IAAA,KAAA;AACI/B,IAAAA,GAAAA,IAAAA,CAAKgC,UAAAA,GAAa;AAAC,MAAA;QAAkB,EAAA;AACzC,IAAA,MAAA;AACA,IAAA,8CAAA;AACGN,IAAAA,GAAAA,OAAAA;AACAG,IAAAA,GAAAA,aAAAA;AACH,IAAA,IAAA;AACA,IAAA,CAAA,EAAG/D,aAAAA,CAAAA,WAAAA,CAAAA;AACH,IAAA,IAAA;AACA,IAAA,CAAA,WAAA,EAAcoD,YAAAA,CAAAA,CAAAA;AACVpB,IAAAA,GAAAA,CAAAA,OAAAA,IAAW,EAAA,EAAI6B,OAAAA,CAAQ,CAACM,CAAAA,KAAM;AAAC,MAAA,IAAA;AAAMA,MAAAA,CAAAA,CAAEb,IAAAA;AAAO,KAAA,CAAA;AAC/CxD,IAAAA,GAAAA,kBAAAA,CAAmBC,OAAAA,EAASC,aAAAA,CAAAA,CAAe6D,OAAAA,CAAQ,CAACjE,MAAAA,KAAW;AAC9D,MAAA,IAAA;AACAwE,MAAAA,aAAAA,CAAcxE,MAAAA;AACjB,KAAA,CAAA;OACGgC,UAAAA,GAAa;AAAC,MAAA,cAAA;AAAgBA,MAAAA;QAAc,EAAA;AAChDnB,IAAAA,QAAAA;AACGuD,IAAAA,GAAAA;;AAGP,EAAA,MAAMtD,MAAAA,GAAS,MAAM2D,QAAAA,CACjBtE,OAAAA,CAAQ8D,OAAAA,CAAQ,CAACjE,MAAAA,KACbA,MAAAA,CAAOM,IAAAA,KAAS,SAAA,IAAaN,MAAAA,CAAO0E,MAAAA,GAAS;IAAC1E,MAAAA,CAAO0C;MAAQ,EAAE,GAEnE,YAAA;AACI,IAAA,MAAMiC,KAAAA,GAAQ,CAAA,aAAA,EAAMP,SAAAA,CAAU3C,IAAAA,CAAK,GAAA,CAAA,CAAA,CAAA;AACnCP,IAAAA,OAAAA,CAAQ0D,KAAKD,KAAAA,CAAAA;AACb,IAAA,MAAME,MAAAA,GAAS,MAAMtF,CAAAA,CAAAA,OAAAA,EAAW8E,UAAAA,GAAatD,OAAAA,EAAO;AACpDG,IAAAA,OAAAA,CAAQ4D,QAAQH,KAAAA,CAAAA;AAEhB,IAAA,OAAOE,MAAAA;EACX,CAAA,CAAA;AAGJ,EAAA,IAAI/D,OAAOG,QAAAA,EAAU;AACjB,IAAA,MAAM8D,MAAAA,GAASjE,MAAAA,CAAOiE,MAAAA,CAAOrB,IAAAA,EAAI;AACjC,IAAA,MAAM,IAAIrC,KAAAA,CACN,CAAA,2CAAA,EAA8CP,MAAAA,CAAOG,QAAQ,IAAI8D,MAAAA,GAAS;EAAKA,MAAAA,CAAAA,CAAAA,GAAW,EAAA,CAAA,CAAI,CAAA;AAEtG,EAAA;AAEA,EAAA,OAAOjE,MAAAA;AACX;AA7KsBY,MAAAA,CAAAA,kBAAAA,EAAAA,oBAAAA,CAAAA","file":"KDX2NZOU.js","sourcesContent":["import { uniqBy } from 'es-toolkit';\nimport os from 'node:os';\nimport path from 'node:path';\nimport process from 'node:process';\nimport * as semver from 'semver';\nimport { $, type ProcessOutput } from 'zx';\n\nimport type { EnvironmentVariable, VolumeMapping } from '../config';\nimport type { ChainContext } from '../context';\nimport { findWorkspaceRoot } from '../utils';\nimport { getImageUriForTool, getVolumeName } from '../utils/docker';\nimport { stringifyError } from '../utils/error';\nimport { findToolByName } from '../utils/finder';\nimport { lockMany } from './lock';\nimport { resolveTypeVersions } from './version-resolver';\n\n/**\n * Get the current user's UID and GID for Docker container user matching.\n * This prevents permission issues when containers write to bind-mounted directories.\n * On Windows or when running as root, returns undefined as UID/GID matching is not needed.\n */\nconst getHostUserIds = (): { uid: number; gid: number } | undefined => {\n    // os.userInfo() returns uid/gid on POSIX systems, -1 on Windows\n    const userInfo = os.userInfo();\n    if (userInfo.uid === -1 || userInfo.gid === -1) {\n        return undefined;\n    }\n\n    return { uid: userInfo.uid, gid: userInfo.gid };\n};\n\n// Configure zx to inherit stdio by default (moved from original setup)\n$.verbose = true;\n$.stdio = ['inherit', 'pipe', process.stderr];\n\n/**\n * Merge default volumes with user-specified volumes\n * User volumes take precedence when containerPath conflicts\n */\nconst mergeVolumes = (\n    defaultVolumes: readonly VolumeMapping[],\n    userVolumes: readonly VolumeMapping[],\n): VolumeMapping[] => uniqBy([...userVolumes, ...defaultVolumes], (volume) => volume.containerPath);\n\n/**\n * Resolve host paths in volumes to absolute paths\n * - Paths starting with ~ are resolved to home directory\n * - Relative paths (starting with . or no prefix) are resolved to workspace root\n * - Absolute paths are left unchanged\n */\nconst resolveVolumePaths = (volumes: VolumeMapping[], workspaceRoot: string): VolumeMapping[] =>\n    volumes.map((volume) =>\n        volume.type === 'host'\n            ? {\n                  ...volume,\n                  hostPath: path.resolve(\n                      workspaceRoot,\n                      volume.hostPath.replace(/^~/, os.homedir()),\n                  ),\n              }\n            : volume,\n    );\n\nconst ensureDockerImage = async (imageUri: string): Promise<void> => {\n    let output: ProcessOutput;\n\n    try {\n        // Check local images first.\n        //\n        // NOTE: `docker image ls <ref>` prints repository/tag in separate columns, so\n        // `stdout.includes(<full-ref>)` is not reliable. Use `inspect` instead: exitCode=0\n        // means the image exists locally.\n        // Keep output minimal to avoid dumping full inspect JSON into CI logs.\n        //\n        // NOTE: Using `.quiet()` to avoid stderr being captured in the CI logs. If the image\n        // is not in the cache, the process prints \"Error response from daemon: No such image: ...\"\n        // which can confuse the uninitiated. It's just a cache miss, not an error.\n        output = await $`docker image inspect --format {{.Id}} ${imageUri}`.nothrow().quiet();\n        if (!output.exitCode) {\n            console.info(`✅ Using cached Docker image: ${imageUri}`);\n            return;\n        }\n\n        console.info('📥 Pulling Docker image from:', imageUri);\n        output = await $`docker pull ${imageUri}`.nothrow();\n    } catch (error: unknown) {\n        throw new Error(`Failed to pull Docker image ${imageUri}: ${stringifyError(error)}`);\n    }\n\n    if (output.exitCode) {\n        const stderr = output.stderr ?? '';\n        const isAuthError =\n            stderr.includes('authorization token has expired') ||\n            stderr.includes('denied') ||\n            stderr.includes('pull access denied');\n\n        throw new Error(\n            [\n                'Docker image not available:',\n                `  - Image: ${imageUri} (pull failed)`,\n                isAuthError\n                    ? '  - ECR auth expired. Run: pnpm localnet login'\n                    : '  - Check if the image tag exists in image registry.',\n            ].join('\\n'),\n        );\n    }\n\n    console.info(`✅ Successfully pulled: ${imageUri}`);\n};\n\nexport interface ToolCommandExecutionOptions {\n    cwd: string;\n    volumes: readonly VolumeMapping[];\n    customEntrypoint?: string;\n    env: EnvironmentVariable[];\n    args?: string[];\n    script?: string;\n    publish?: string[];\n    versions?: Record<string, string>;\n}\n\n/**\n * Enhanced tool command execution using the new version compatibility matrix system\n */\nexport async function executeToolCommand<TImageId extends string>(\n    context: ChainContext<TImageId>,\n    toolName: string,\n    args: string[],\n    {\n        cwd,\n        volumes: userVolumes,\n        customEntrypoint: entrypoint,\n        env: customEnvVars,\n        script,\n        publish,\n        versions = {},\n    }: ToolCommandExecutionOptions,\n): Promise<ProcessOutput> {\n    const tool = findToolByName(context, toolName);\n\n    // Run pre-execution hook if defined (e.g., toolchain sync)\n    if (tool.preExecute) {\n        await tool.preExecute(context, {\n            cwd,\n            args,\n            volumes: userVolumes,\n            env: customEnvVars,\n            script,\n            publish,\n            versions,\n        });\n    }\n\n    // Merge default volumes with user-specified volumes\n    const defaultVolumes = tool.defaultVolumes ?? [];\n    const volumes = mergeVolumes(defaultVolumes, userVolumes);\n\n    if (defaultVolumes.length > 0) {\n        console.info(`📦 Using ${defaultVolumes.length} default cache volume(s) for ${tool.name}`);\n        if (userVolumes.length > 0) {\n            const overrides = userVolumes.filter((uv) =>\n                defaultVolumes.some((dv) => dv.containerPath === uv.containerPath),\n            );\n            if (overrides.length > 0) {\n                console.info(`🔧 User volumes override ${overrides.length} default volume(s)`);\n            }\n        }\n    }\n\n    // Get the resolved version for the current tool.\n    const resolvedVersion = resolveTypeVersions(context, versions)[tool.name];\n\n    if (!resolvedVersion) {\n        throw new Error(`No version resolved for tool ${tool.name}`);\n    }\n\n    console.info(`🔧 ${tool.name} version: ${resolvedVersion}`);\n\n    // Check secondary version validation if available\n    if (tool.getSecondaryVersion) {\n        try {\n            const secondaryVersion = await tool.getSecondaryVersion({ cwd });\n\n            if (!semver.satisfies(secondaryVersion, resolvedVersion)) {\n                console.warn(\n                    `Warning: Local configuration version (${secondaryVersion}) differs from resolved version (${resolvedVersion})`,\n                );\n            }\n        } catch (error) {\n            // Secondary version check failed, but continue with resolved version\n            console.warn('Could not validate secondary version:', stringifyError(error));\n        }\n    }\n\n    // Use Docker image with merged volumes\n    const imageUri = await getImageUriForTool(context, tool.name, resolvedVersion);\n    const workspaceRoot = await findWorkspaceRoot(cwd);\n    const relativePath = path.relative(workspaceRoot, cwd);\n\n    await ensureDockerImage(imageUri);\n\n    if (entrypoint?.trim()) {\n        console.info(`🔧 Using custom entrypoint: ${entrypoint}`);\n    }\n\n    // Merge default env vars with custom env vars (custom takes precedence)\n    const defaultEnv = tool.defaultEnv ?? [];\n\n    // Check if Docker socket is mounted (for tools that spawn Docker containers like anchor --verifiable)\n    // If so, inject HOST_CWD and HOST_WORKSPACE_ROOT so the inner container knows the host paths\n    const hasDockerSocketMount = volumes.some(\n        (v) => v.type === 'host' && v.containerPath === '/var/run/docker.sock',\n    );\n    const dockerSocketEnv: EnvironmentVariable[] = hasDockerSocketMount\n        ? [\n              { name: 'HOST_CWD', value: cwd },\n              { name: 'HOST_WORKSPACE_ROOT', value: workspaceRoot },\n          ]\n        : [];\n\n    const envArgs = uniqBy(\n        [...customEnvVars, ...dockerSocketEnv, ...defaultEnv],\n        ({ name }) => name,\n    ).flatMap(({ name, value }) => ['-e', `${name}=${value}`]);\n\n    // Add host user UID/GID for permission matching on Linux/macOS\n    // This prevents artifacts created in containers from having root ownership\n    // Currently only used for stellar which has an entrypoint that handles UID/GID\n    const hostUserIds = getHostUserIds();\n    const userIdEnvArgs = hostUserIds\n        ? ['-e', `LOCAL_UID=${hostUserIds.uid}`, '-e', `LOCAL_GID=${hostUserIds.gid}`]\n        : [];\n\n    console.info(`👤 Running container as UID:GID ${hostUserIds?.uid}:${hostUserIds?.gid}`);\n\n    if (defaultEnv.length > 0) {\n        console.info(\n            `🌍 Using ${defaultEnv.length} default environment variable(s) for ${tool.name}`,\n        );\n    }\n    if (customEnvVars.length > 0) {\n        console.info(`🌍 Using ${customEnvVars.length} custom environment variable(s)`);\n    }\n\n    // Handle custom script execution\n    let finalArgs: string[];\n    if (script && script.trim() !== '') {\n        console.info(`📜 Executing custom script: ${script}`);\n        finalArgs = ['bash', '-c', script];\n    } else {\n        finalArgs = entrypoint === undefined ? [tool.name, ...args] : args;\n    }\n\n    // Build the Docker command with proper argument separation\n    const dockerArgs = [\n        'run',\n        ...(tool.privileged ? ['--privileged'] : []),\n        '--rm',\n        '--add-host=host.docker.internal:host-gateway',\n        ...envArgs,\n        ...userIdEnvArgs,\n        '-v',\n        `${workspaceRoot}:/workspace`,\n        '-w',\n        `/workspace/${relativePath}`,\n        ...(publish ?? []).flatMap((p) => ['-p', p.trim()]),\n        ...resolveVolumePaths(volumes, workspaceRoot).flatMap((volume) => [\n            '-v',\n            getVolumeName(volume),\n        ]),\n        ...(entrypoint ? ['--entrypoint', entrypoint] : []),\n        imageUri,\n        ...finalArgs,\n    ];\n\n    const output = await lockMany(\n        volumes.flatMap((volume) =>\n            volume.type === 'isolate' && volume.locked ? [volume.name] : [],\n        ),\n        async () => {\n            const label = `⏱️ ${finalArgs.join(' ')}`;\n            console.time(label);\n            const result = await $`docker ${dockerArgs}`.nothrow();\n            console.timeEnd(label);\n\n            return result;\n        },\n    );\n\n    if (output.exitCode) {\n        const stdout = output.stdout.trim();\n        throw new Error(\n            `Failed to run Docker container (exit code: ${output.exitCode})${stdout ? `\\n${stdout}` : ''}`,\n        );\n    }\n\n    return output;\n}\n"]}

package/dist/{VF2UWSC3.js → KPLQJLFW.js}

@@ -1,4 +1,4 @@
-import { getImageTag } from './GPDDKHCR.js';
+import { getImageTag } from './ERBSYZRH.js';
 import { getImageName } from './KWRJPB5T.js';
 import { init_esm_shims, __name } from './6AHA7PAZ.js';
 import { constantCase } from 'es-toolkit';
@@ -14,6 +14,9 @@ var generateGithubMatrix = /* @__PURE__ */ __name((images, directory, versionCom
   const createImageEntry = /* @__PURE__ */ __name(([imageId, image]) => {
     const imageName = getImageName(image.name);
     const tags = TAG_SEPARATORS.map((separator) => getImageTag(image, separator));
+    if (tags.length === 0 || !tags[0]) {
+      throw new Error(`Image "${imageId}" produced no tags. Every image must have at least one non-empty tag.`);
+    }
     return {
       entry: {
         id: imageId,
@@ -51,5 +54,5 @@ var generateGithubMatrix = /* @__PURE__ */ __name((images, directory, versionCom
 }, "generateGithubMatrix");
 
 export { generateGithubMatrix };
-//# sourceMappingURL=VF2UWSC3.js.map
-//# sourceMappingURL=VF2UWSC3.js.map
+//# sourceMappingURL=KPLQJLFW.js.map
+//# sourceMappingURL=KPLQJLFW.js.map

package/dist/KPLQJLFW.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/github/matrix.ts"],"names":["TAG_SEPARATORS","generateGithubMatrix","images","directory","versionCombinations","createImageEntry","imageId","image","imageName","getImageName","name","tags","map","separator","getImageTag","length","Error","entry","id","build_args","Object","entries","versions","dependencies","sort","key","value","constantCase","join","image_name","results","imageEntries","r","mirroredImages","filter","result","mirrorRegistries","flatMap","mirror","activeImages","activeImageIds","Set","combo","values","push"],"mappings":";;;;;;;AAAA,cAAA,EAAA;AA+BA,IAAMA,cAAAA,GAAiB;AAAC,EAAA,GAAA;AAAK,EAAA;;AAEtB,IAAMC,oBAAAA,mBAAuB,MAAA,CAAA,CAChCC,MAAAA,EACAC,SAAAA,EACAC,mBAAAA,KAAAA;AAEA,EAAA,MAAMC,gBAAAA,mBAAmB,MAAA,CAAA,CAAC,CAACC,OAAAA,EAASC,KAAAA,CAAAA,KAAuB;AAIvD,IAAA,MAAMC,SAAAA,GAAYC,YAAAA,CAAaF,KAAAA,CAAMG,IAAI,CAAA;AACzC,IAAA,MAAMC,IAAAA,GAAOX,eAAeY,GAAAA,CAAI,CAACC,cAAcC,WAAAA,CAAYP,KAAAA,EAAOM,SAAAA,CAAAA,CAAAA;AAElE,IAAA,IAAIF,KAAKI,MAAAA,KAAW,CAAA,IAAK,CAACJ,IAAAA,CAAK,CAAA,CAAA,EAAI;AAC/B,MAAA,MAAM,IAAIK,KAAAA,CACN,CAAA,OAAA,EAAUV,OAAAA,CAAAA,qEAAAA,CAA8E,CAAA;AAEhG,IAAA;AAEA,IAAA,OAAO;MACHW,KAAAA,EAAO;QACHC,EAAAA,EAAIZ,OAAAA;AACJI,QAAAA,IAAAA,EAAMH,KAAAA,CAAMG,IAAAA;AACZS,QAAAA,UAAAA,EAAYC,OAAOC,OAAAA,CAAQ;AAAE,UAAA,GAAGd,KAAAA,CAAMe,QAAAA;AAAU,UAAA,GAAGf,KAAAA,CAAMgB;AAAa,SAAA,CAAA,CACjEC,IAAAA,EAAI,CACJZ,GAAAA,CAAI,CAAC,CAACa,GAAAA,EAAKC,KAAAA,CAAAA,KAAW,GAAGC,YAAAA,CAAaF,GAAAA,CAAAA,CAAAA,SAAAA,EAAgBC,KAAAA,CAAAA,CAAO,CAAA;AAClEvB,QAAAA,SAAAA,EAAWyB,IAAAA,CAAKzB,SAAAA,EAAW,QAAA,EAAUI,KAAAA,CAAMG,IAAI,CAAA;QAC/CmB,UAAAA,EAAYrB,SAAAA;AACZG,QAAAA;AACJ,OAAA;AACAJ,MAAAA;AACJ,KAAA;EACJ,CAAA,EA1ByB,kBAAA,CAAA;AA4BzB,EAAA,MAAMuB,UAAUV,MAAAA,CAAOC,OAAAA,CAAQnB,MAAAA,CAAAA,CAAQU,IAAIP,gBAAAA,CAAAA;AAE3C,EAAA,MAAM0B,eAAeD,OAAAA,CAAQlB,GAAAA,CAAI,CAACoB,CAAAA,KAAMA,EAAEf,KAAK,CAAA;AAE/C,EAAA,MAAMgB,iBAAiBH,OAAAA,CAClBI,MAAAA,CAAO,CAACC,MAAAA,KAAWA,MAAAA,CAAO5B,MAAM6B,gBAAAA,EAAkBrB,MAAAA,CAAAA,CAClDsB,OAAAA,CAAQ,CAACF,MAAAA,KACNA,MAAAA,CAAO5B,MAAM6B,gBAAAA,CAAkBxB,GAAAA,CAAI,CAAC0B,MAAAA,MAAY;AAC5CpB,IAAAA,EAAAA,EAAIiB,OAAOlB,KAAAA,CAAMC,EAAAA;AACjBR,IAAAA,IAAAA,EAAMyB,OAAOlB,KAAAA,CAAMP,IAAAA;AACnBmB,IAAAA,UAAAA,EAAYM,OAAOlB,KAAAA,CAAMY,UAAAA;AACzBlB,IAAAA,IAAAA,EAAMwB,OAAOlB,KAAAA,CAAMN,IAAAA;AACnB2B,IAAAA;AACJ,GAAA,CAAA,CAAA,CAAA;AAGR,EAAA,MAAMC,eAAyB,EAAA;AAC/B,EAAA,IAAInC,mBAAAA,EAAqB;AACrB,IAAA,MAAMoC,cAAAA,GAAiB,IAAIC,GAAAA,CACvBrC,mBAAAA,CAAoBiC,OAAAA,CAAQ,CAACK,KAAAA,KAAUtB,MAAAA,CAAOuB,MAAAA,CAAOD,KAAAA,CAAMxC,MAAM,CAAA,CAAA,CAAA;AAErEqC,IAAAA,YAAAA,CAAaK,IAAAA,CAAI,GAAIJ,cAAAA,CAAAA;AACzB,EAAA;AAEA,EAAA,OAAO;IAAEtC,MAAAA,EAAQ6B,YAAAA;AAAcE,IAAAA,cAAAA;AAAgBM,IAAAA;AAAa,GAAA;AAChE,CAAA,EA1DoC,sBAAA","file":"KPLQJLFW.js","sourcesContent":["import { constantCase } from 'es-toolkit';\nimport { join } from 'node:path';\n\nimport { type Image, type VersionCombination } from '../config';\nimport { getImageTag } from '../utils/docker';\nimport { getImageName } from '../utils/finder';\n\ninterface ImageEntry {\n    id: string;\n    name: string;\n    build_args: string[];\n    image_name: string;\n    tags: string[];\n    directory: string;\n}\n\ninterface MirroredImageEntry {\n    id: string;\n    name: string;\n    image_name: string;\n    tags: string[];\n    mirror: string;\n}\n\ninterface GithubMatrixOutput {\n    images: ImageEntry[];\n    mirroredImages: MirroredImageEntry[];\n    activeImages: string[];\n}\n\n// TODO Remove underscore which is not standard in the Docker tag naming scheme.\nconst TAG_SEPARATORS = ['-', '_'] as const;\n\nexport const generateGithubMatrix = (\n    images: Record<string, Image>,\n    directory: string,\n    versionCombinations?: VersionCombination<string>[],\n): GithubMatrixOutput => {\n    const createImageEntry = ([imageId, image]: [string, Image]): {\n        entry: ImageEntry;\n        image: Image;\n    } => {\n        const imageName = getImageName(image.name);\n        const tags = TAG_SEPARATORS.map((separator) => getImageTag(image, separator));\n\n        if (tags.length === 0 || !tags[0]) {\n            throw new Error(\n                `Image \"${imageId}\" produced no tags. Every image must have at least one non-empty tag.`,\n            );\n        }\n\n        return {\n            entry: {\n                id: imageId,\n                name: image.name,\n                build_args: Object.entries({ ...image.versions, ...image.dependencies })\n                    .sort()\n                    .map(([key, value]) => `${constantCase(key)}_VERSION=${value}`),\n                directory: join(directory, 'docker', image.name),\n                image_name: imageName,\n                tags,\n            },\n            image,\n        };\n    };\n\n    const results = Object.entries(images).map(createImageEntry);\n\n    const imageEntries = results.map((r) => r.entry);\n\n    const mirroredImages = results\n        .filter((result) => result.image.mirrorRegistries?.length)\n        .flatMap((result) =>\n            result.image.mirrorRegistries!.map((mirror) => ({\n                id: result.entry.id,\n                name: result.entry.name,\n                image_name: result.entry.image_name,\n                tags: result.entry.tags,\n                mirror,\n            })),\n        );\n\n    const activeImages: string[] = [];\n    if (versionCombinations) {\n        const activeImageIds = new Set(\n            versionCombinations.flatMap((combo) => Object.values(combo.images)),\n        );\n        activeImages.push(...activeImageIds);\n    }\n\n    return { images: imageEntries, mirroredImages, activeImages };\n};\n"]}